Johnny Tam said: > > Does anyone know what this means? > > [**] [1:466:1] ICMP L3retriever Ping [**] > [Classification: Attempted Information Leak] [Priority: 2] > 07/11-11:37:36.788936 0:8:74:46:E3:9D -> 0:C0:9F:1A:56:9B type:0x800 > len:0x4A 192.168.0.XXX -> 192.168.0.YYY ICMP TTL:32 TOS:0x0 ID:225 > IpLen:20 DgmLen:60 Type:8 Code:0 ID:768 Seq:1536 ECHO > [Xref => http://www.whitehats.com/info/IDS311]
ping (type 8 = icmp echo request) from 192.168.0.XXX to 192.168.0.XXX or from mac addr 0:8:74:46:E3:9D to 0:C0:9F:1A:56:9B . rowel -- Philippine Linux Users' Group (PLUG) Mailing List [EMAIL PROTECTED] (#PLUG @ irc.free.net.ph) Official Website: http://plug.linux.org.ph Searchable Archives: http://marc.free.net.ph . To leave, go to http://lists.q-linux.com/mailman/listinfo/plug . Are you a Linux newbie? To join the newbie list, go to http://lists.q-linux.com/mailman/listinfo/ph-linux-newbie
