Snort mailing list archives
Re: (snort_decoder) WARNING: IP dgm len < IP Hdr len!
From: snort user <snort.user () gmail com>
Date: Mon, 19 Sep 2005 13:13:38 -0400
a malformed ip packet while decoding the packet, it is found that the ip header length is greater than ip datagram length (based on the ip header values) On 9/19/05, Ron Jenkins <rjenkins () dibr net> wrote:
Does any have information on the below alert: *(snort_decoder) WARNING: IP dgm len < IP Hdr len!* Thanks… Ron Jenkins (SnortCP, MCNE, CNE6, MCP, CCNA, CCEA) Senior Architect Data Integrity, LLC "We Integrate People with Solutions" 1724 Dallas Drive Suite 11 Baton Rouge, La 70806 Office. 225.927.8030 Fax. 225.927.8033 Cell225.931.1632 Email. rjenkins () dibr net Web. http://www.dibr.net (Aanval Reseller and Technology Partner) http://www.aanval.com/tour/dibr
Current thread:
- (snort_decoder) WARNING: IP dgm len < IP Hdr len! Ron Jenkins (Sep 19)
- Re: (snort_decoder) WARNING: IP dgm len < IP Hdr len! snort user (Sep 19)