|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Subject: Re: [snort] Anybody got a clue
From: CyberPsychotic (fygrave
epr0.org)Date: Sat Mar 04 2000 - 16:10:47 CST
- Next message: Max Vision: "Re: [snort] Anybody got a clue"
- Previous message: CyberPsychotic: "Re: [snort] snort uses obsolete (PF_INET,SOCK_PACKET)"
- In reply to: Max Vision: "Re: [snort] Anybody got a clue"
- Next in thread: Max Vision: "Re: [snort] Anybody got a clue"
- Reply: CyberPsychotic: "Re: [snort] Anybody got a clue"
- Reply: Max Vision: "Re: [snort] Anybody got a clue"
- Reply: Ralf Hildebrandt: "Re: [snort] Anybody got a clue"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
~ :Multicast of some sort. 224.0.0.0 is a reserved address range "MCAST-NET".
~ :Honestly, I haven't seen a whole lot of ligitimate multicast traffic, so
~ :I'm not sure what this packet could be.
my cisco routers constantly send multicast datagrams on its interfaces to
perform router discovery, so far I understand. (I could dig up
specifications too, if interested)
- Next message: Max Vision: "Re: [snort] Anybody got a clue"
- Previous message: CyberPsychotic: "Re: [snort] snort uses obsolete (PF_INET,SOCK_PACKET)"
- In reply to: Max Vision: "Re: [snort] Anybody got a clue"
- Next in thread: Max Vision: "Re: [snort] Anybody got a clue"
- Reply: CyberPsychotic: "Re: [snort] Anybody got a clue"
- Reply: Max Vision: "Re: [snort] Anybody got a clue"
- Reply: Ralf Hildebrandt: "Re: [snort] Anybody got a clue"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]