Snort isn't alerting on some IPs

[Nouar Ismail <nouaresmail () gmail com>]

Hello
I installed and configured snort on windows and installed the latest snort
rules set.
i have a tcpdump file that contains suspicious icmp traffic from source IP
1.2.3.4
but snort did not alert on it.
i added my own rule in local rules: alert icmp 1.2.3.4 any -> any any (msg:
"possible pod attack" ; sid:10000001; )
but also did not alert on it.
i tried also: alert ip 1.2.3.4 any -> any any (msg: "possible pod attack" ;
sid:10000001; ) and sill did not alert.
any one hase any idea about this ?? please it's urgent.
Thank you.

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most 
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!