Re: tippingpoint]

[Michael Sierchio <kudzu () tenebras com>]

Geoff wrote:

> ... We also dropped ICMP Welchia
> packets, they consist of an echo request with 64 A's. ...

There seems to be more than one source of packets with
0xaa in the ICMP payload.  And what is it that generates
ICMP echo requests with 0x45 ('E') as the payload?

Tak,

kudzu

--

"Well," Brahma said, "even after ten thousand explanations, a fool is no
 wiser, but an intelligent man requires only two thousand five hundred."
                - The Mahabharata



-------------------------------------------------------
This SF.net email sponsored by: Enterprise Linux Forum Conference & Expo
The Event For Linux Datacenter Solutions & Strategies in The Enterprise 
Linux in the Boardroom; in the Front Office; & in the Server Room 
http://www.enterpriselinuxforum.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users