Re: snort detecting ICMP traffic, tomcat?

2010-05-12 Thread Mark H. Wood
On Tue, May 11, 2010 at 09:33:36AM -0500, Caldarale, Charles R wrote: From: James R. Marcus [mailto:jmar...@edhance.com] Subject: snort detecting ICMP traffic, tomcat? Could Tomcat be generating ICMP traffic to an IP accessing the server? No. Java is not capable of generating ICMP

snort detecting ICMP traffic, tomcat?

2010-05-11 Thread James R. Marcus
Hi, I run Snort in a PCI environment. I have just rebuilt Snort and I’m in the tuning stage. I have Tomcat 6.0.18 in the PCI environment and it may be initiating ICMP traffic to external IPs. Here is the alert: [1:486:5] ICMP Destination Unreachable Communication with Destination Host is

RE: snort detecting ICMP traffic, tomcat?

2010-05-11 Thread Caldarale, Charles R
From: James R. Marcus [mailto:jmar...@edhance.com] Subject: snort detecting ICMP traffic, tomcat? Could Tomcat be generating ICMP traffic to an IP accessing the server? No. Java is not capable of generating ICMP messages. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL

Re: snort detecting ICMP traffic, tomcat?

2010-05-11 Thread Pid
On 11/05/2010 15:17, James R. Marcus wrote: Hi, I run Snort in a PCI environment. I have just rebuilt Snort and I’m in the tuning stage. I have Tomcat 6.0.18 in the PCI environment and it may be initiating ICMP traffic to external IPs. Here is the alert: [1:486:5] ICMP Destination