Snort mailing list archives
Re: Snort FAQ 1.8
From: Ramin Alidousti <ramin () cannon eng us uu net>
Date: Tue, 10 Jul 2001 16:11:39 -0400
Yes, Blake, my point was the typo byte/bit :-) The original IP header (20 bytes [without additional options, of course]) and the first 64 data bits (8 bytes) is 28 bytes and not 64 bytes :-) Ramin On Tue, Jul 10, 2001 at 03:04:07PM -0500, Blake Frantz wrote:
The ICMP packet returns the original Internet header *AND* the first 64 bits data bits. -Blake ================================================================= The Government, like diapers, should be replaced regularly, and often for the same reasons. On Tue, 10 Jul 2001, Ramin Alidousti wrote:The answer of 4.8 suggests that the ICMP carries the first 64 _bytes_ of the original datagram. I believe that it should be "the first 64 data _bits_" :-) Ramin On Mon, Jul 09, 2001 at 10:30:15PM -0700, Dragos Ruiu wrote:Send me your complaints. :-) Or translations... cheers, --dr_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: http://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: http://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort FAQ 1.8 Dragos Ruiu (Jul 09)
- Re: Snort FAQ 1.8 Ramin Alidousti (Jul 10)
- Re: Snort FAQ 1.8 Blake Frantz (Jul 10)
- Re: Snort FAQ 1.8 Ramin Alidousti (Jul 10)
- Re: Snort FAQ 1.8 Phil Wood (Jul 10)
- Re: Snort FAQ 1.8 Ramin Alidousti (Jul 10)
- Re: Snort FAQ 1.8 Dragos Ruiu (Jul 10)
- Re: Snort FAQ 1.8 Blake Frantz (Jul 10)
- <Possible follow-ups>
- RE: Snort FAQ 1.8 Kohlenberg, Toby (Jul 10)
- Re: Snort FAQ 1.8 Phil Wood (Jul 10)
- RE: Snort FAQ 1.8 Burleson, Lee (IA) (Jul 11)
- Re: Snort FAQ 1.8 Ramin Alidousti (Jul 11)
- Re: Snort FAQ 1.8 Phil Wood (Jul 11)
- Re: Snort FAQ 1.8 Paul Howell (Jul 20)
- Re: Snort FAQ 1.8 Dragos Ruiu (Jul 20)
- Re: Snort FAQ 1.8 Ramin Alidousti (Jul 10)