Snort mailing list archives
Re: Snort FAQ 1.8
From: Ramin Alidousti <ramin () cannon eng us uu net>
Date: Wed, 11 Jul 2001 16:29:38 -0400
On Wed, Jul 11, 2001 at 01:34:17PM -0500, Burleson, Lee (IA) wrote:
Don't people usually want to know _why_ it is important? I.e., what are the security implications of this event? I just thought that if you are going to devote the space to question 4.8, that fundamental question should be answered. :)
Good point. Phil's answer is actually the complete answer to the question below. The context in which such an ICMP gets generated depends on the network/host/service situation. But, I think, Phil's answer gives enough background information so the users can figure out what was going on in their particular case. Ramin
Thanks for listening. - LeeQ: What are all these "ICMP destination unreachable" alerts?
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: http://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort FAQ 1.8 Dragos Ruiu (Jul 09)
- Re: Snort FAQ 1.8 Ramin Alidousti (Jul 10)
- Re: Snort FAQ 1.8 Blake Frantz (Jul 10)
- Re: Snort FAQ 1.8 Ramin Alidousti (Jul 10)
- Re: Snort FAQ 1.8 Phil Wood (Jul 10)
- Re: Snort FAQ 1.8 Ramin Alidousti (Jul 10)
- Re: Snort FAQ 1.8 Dragos Ruiu (Jul 10)
- Re: Snort FAQ 1.8 Blake Frantz (Jul 10)
- <Possible follow-ups>
- RE: Snort FAQ 1.8 Kohlenberg, Toby (Jul 10)
- Re: Snort FAQ 1.8 Phil Wood (Jul 10)
- RE: Snort FAQ 1.8 Burleson, Lee (IA) (Jul 11)
- Re: Snort FAQ 1.8 Ramin Alidousti (Jul 11)
- Re: Snort FAQ 1.8 Phil Wood (Jul 11)
- Re: Snort FAQ 1.8 Paul Howell (Jul 20)
- Re: Snort FAQ 1.8 Dragos Ruiu (Jul 20)
- Re: Snort FAQ 1.8 Ramin Alidousti (Jul 10)