Snort mailing list archives

Re: ping flood


From: Avi Norowitz <avi () ulag net>
Date: Fri, 17 Aug 2001 14:43:04 -0400

ping flood, as in:

ping -f host

:-)


On Fri, 17 Aug 2001 13:26:58 +0200
"Ofir Arkin" <ofir () sys-security com> wrote:

Avi,

It depends on your definition on "flood" and the ICMP datagrams used for
that.

What is your definition of "old fashion ping floods"?


Ofir Arkin [ofir () sys-security com]
Founder
The Sys-Security Group
http://www.sys-security.com
PGP CC2C BE53 12C6 C9F2 87B1 B8C6 0DFA CF2D D360 43FA

-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of Avi
Norowitz
Sent: ? 17 ?????? 2001 9:45
To: snort-users () lists sourceforge net
Subject: [Snort-users] ping flood

Hello,

Is there any way to get snort to pick up old fashion ping floods? iplog
picked up ping floods fine, but snort seems more flexible ... but it
doesn't seem to hear ping floods by default.

Thanks.
-- 
By reading this message you hereby agree to all concepts, statements,
ideas, and opinions contained within it's text.       http://ulag.net

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-- 
By reading this message you hereby agree to all concepts, statements,
ideas, and opinions contained within it's text.       http://ulag.net

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: