Re: MISC Large ICMP Packet alert on small ICMP packet

["Mark Cooper" <mark () mhc-online co uk>]

Bill,

This is nowhere near as creative as John Sage's answer but, IIRC, v1.8.3 had
a bug in the calculation of the packet size, or similar. Which version are
you running?

For info on the bug, posted 18/12/2001:
http://sourceforge.net/tracker/index.php?func=detail&aid=494701&group_id=335
7&atid=103357

Regards,

Mark Cooper


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users