Snort mailing list archives
riddle me this....
From: "larosa, vjay" <larosa_vjay () emc com>
Date: Thu, 9 May 2002 16:38:11 -0400
What kind of packet gets sent across the network with both the DF and MF bits set? My BAD TAFFIC bad frag bits rule keeps getting set off by hosts on my network. Shouldn't a switch/router drop packets like this and respond with an ICMP error message to the originator? The UDP packet size is 1520 (20 byte IP header, 1500 byte payload) Could this be fragroute(r)? Thanks! vjl _______________________________________________________________ Have big pipes? SourceForge.net is looking for download mirrors. We supply the hardware. You get the recognition. Email Us: bandwidth () sourceforge net _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- riddle me this.... larosa, vjay (May 09)