Problem with icmp_seq

[sofia insat <sofia.insat () yahoo fr>]

Hi,

I have to verify with an hexadecimal icmp sequence that have this value "beef"
so I have written this rule :
alert icmp any any -> any any (msg:"----------- ICMPv6 : echo request -----------"; itype:128; content: "AAA"; 
icmp_seq: beef; sid:1000001;) 
but It does not detect a packet that have this icmp sequence

How can I resolve this problem

Thanks



------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with
Crystal Reports now.  http://p.sf.net/sfu/bobj-july

_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs