after SP2 snort reports this every few minutes

  • Thread starter Thread starter SherryB
  • Start date Start date
S

SherryB

Event Type: Information
Event Source: snort
Event Category: None
Event ID: 1
Date: 10/4/2004
Time: 3:15:27 PM
User: N/A
Computer: XXX
Description:
[1:466:1] ICMP L3retriever Ping [Classification: Attempted Information Leak]
[Priority: 2]: {ICMP} 192.168.1.20 -> 192.168.1.15

..20 is my workstation, and .15 is my domain controller (W2Ksvr). I
seriously doubt that my workstation is leaking any new information to my
domain controller. What does this mean and how can I make it stop filling
up my Application Log with these things?

Thanks!
 
The issues you are having are unrelated to the Windows XP
operating system. Please visit http://www.snort.org/ for
troubleshooting assistance.

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect Your PC!
http://www.microsoft.com/athome/security/protect/default.aspx

------------------------------------------------------------------------------

:

| Event Type: Information
| Event Source: snort
| Event Category: None
| Event ID: 1
| Date: 10/4/2004
| Time: 3:15:27 PM
| User: N/A
| Computer: XXX
| Description:
| [1:466:1] ICMP L3retriever Ping [Classification: Attempted Information Leak]
| [Priority: 2]: {ICMP} 192.168.1.20 -> 192.168.1.15
|
| .20 is my workstation, and .15 is my domain controller (W2Ksvr). I
| seriously doubt that my workstation is leaking any new information to my
| domain controller. What does this mean and how can I make it stop filling
| up my Application Log with these things?
|
| Thanks!
 
Back
Top