On Tue, May 11, 2010 at 09:33:36AM -0500, Caldarale, Charles R wrote:
From: James R. Marcus [mailto:jmar...@edhance.com]
Subject: snort detecting ICMP traffic, tomcat?
Could Tomcat be generating ICMP traffic to an IP accessing the server?
No. Java is not capable of generating ICMP
Hi,
I run Snort in a PCI environment. I have just rebuilt Snort and I’m in the
tuning stage.
I have Tomcat 6.0.18 in the PCI environment and it may be initiating ICMP
traffic to external IPs. Here is the alert:
[1:486:5] ICMP Destination Unreachable Communication with Destination Host is
From: James R. Marcus [mailto:jmar...@edhance.com]
Subject: snort detecting ICMP traffic, tomcat?
Could Tomcat be generating ICMP traffic to an IP accessing the server?
No. Java is not capable of generating ICMP messages.
- Chuck
THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL
On 11/05/2010 15:17, James R. Marcus wrote:
Hi,
I run Snort in a PCI environment. I have just rebuilt Snort and I’m in the
tuning stage.
I have Tomcat 6.0.18 in the PCI environment and it may be initiating ICMP
traffic to external IPs. Here is the alert:
[1:486:5] ICMP Destination