Re: Strange Traffic Flow

[Jeff Kell <jeff-kell () utc edu>]

Frank Knobbe wrote:
> On Fri, 2005-10-14 at 07:02 -0700, Theodore Stout wrote:
>
> > It's claiming that one host is sending large ICMP
> > packets to my DC, and the DC answers back with the
> > same large ICMP packet. 
> > Why would that be?

> That's normal. Google for "slow link detection domain controller".

[Some? Most? At least our] SAP/R3 applications send out big fat pings instead of tcp keepalives.  

Jeff


-------------------------------------------------------
This SF.Net email is sponsored by:
Power Architecture Resource Center: Free content, downloads, discussions,
and more. http://solutions.newsforge.com/ibmarch.tmpl
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users