[Silicon Defense logo]

SnortSnarf alert page

Destination: 192.168.1.2

SnortSnarf v021111.1

Signature section (91123)Top 20 source IPsTop 20 dest IPs

175 such alerts found using input module SnortFileInput, with sources:
Earliest: 10:59:01.871901 on 04/23/2003
Latest: 17:03:10.301102 on 06/03/2003

5 different signatures are present for 192.168.1.2 as a destination

There are 8 distinct source IPs in the alerts of the type on this page.

192.168.1.2 Whois lookup at: ARIN RIPE APNIC Geektools
DNS lookup at: Amenesi TRIUMF Princeton
More lookup links: Dshield Sam Spade
Go to: overview page


[**] [1:1992:1] FTP LIST directory traversal attempt [**]
[Classification: Generic Protocol Command Decode] [Priority: 3]
04/23-10:59:01.871901 129.137.182.192:2049 -> 192.168.1.2:21
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:226
***AP*** Seq: 0xEC82E05B Ack: 0xFDF5CAD5 Win: 0x1E14 TcpLen: 20
[Xref => http://cgi.nessus.org/plugins/dump.php3?id=11112][Xref => http://www.securityfocus.com/bid/2618][Xref => http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0680]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/26-14:58:29.801086 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:660 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:10241 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/26-14:58:31.956642 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:666 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:10497 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/26-14:58:40.052268 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:675 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:10753 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/26-14:58:42.457816 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:679 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:11009 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/26-14:59:08.664690 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:700 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:11265 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/26-14:59:10.960617 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:701 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:11521 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/26-14:59:20.212588 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:709 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:11777 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/26-14:59:22.461197 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:710 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:12033 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/26-16:51:49.826251 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:10721 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:7936 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/26-16:51:52.214938 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:10723 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:8192 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/26-16:52:28.921008 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:10740 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:8448 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/26-16:52:31.216474 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:10741 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:8704 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/26-16:52:40.469073 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:10748 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:8960 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/26-16:52:42.717017 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:10749 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:9216 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/26-19:00:57.008507 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:41392 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:13824 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/26-19:00:59.131495 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:41393 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:14080 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/26-19:01:35.808841 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:41414 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:14336 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/26-19:01:38.135372 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:41415 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:14592 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/26-19:01:47.388022 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:41423 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:14848 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/26-19:01:49.636784 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:41424 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:15104 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/26-19:02:40.612369 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:41431 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:15360 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/26-19:02:42.641391 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:41432 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:15616 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/26-19:02:45.142998 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:41434 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:15872 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/26-19:02:47.642027 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:41436 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:16128 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/26-21:23:09.095389 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:43219 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:24064 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/26-21:23:11.451469 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:43220 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:24320 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/26-21:23:48.207137 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:43236 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:24576 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/26-21:23:50.455564 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:43237 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:24832 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/26-21:23:59.707959 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:43244 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:25088 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/26-21:24:01.956630 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:43245 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:25344 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/28-09:51:07.602395 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:53779 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:4866 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/28-09:51:10.021708 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:53781 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:5122 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/28-09:51:18.852075 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:53791 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:5378 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/28-09:51:21.022960 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:53794 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:5634 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/28-09:51:46.745745 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:53812 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:5890 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/28-09:51:49.025811 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:53813 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:6146 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/28-09:51:58.278259 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:53821 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:6402 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/28-09:52:00.526818 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:53822 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:6658 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/28-18:25:59.391667 206.151.167.94:80 -> 192.168.1.2:2641
TCP TTL:50 TOS:0x0 ID:48341 IpLen:20 DgmLen:1500
***A**** Seq: 0xB18F029A Ack: 0xE3954B4C Win: 0x2180 TcpLen: 20
[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/28-18:25:59.394325 206.151.167.94:80 -> 192.168.1.2:2641
TCP TTL:50 TOS:0x0 ID:48343 IpLen:20 DgmLen:1500
***A**** Seq: 0xB18F0E02 Ack: 0xE3954B4C Win: 0x2180 TcpLen: 20
[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/28-18:25:59.554311 206.151.167.94:80 -> 192.168.1.2:2641
TCP TTL:50 TOS:0x0 ID:48399 IpLen:20 DgmLen:1500
***A**** Seq: 0xB1904D62 Ack: 0xE3954B4C Win: 0x2180 TcpLen: 20
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/28-18:32:53.497866 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:62469 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:32514 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/28-18:32:55.540980 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:62491 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:32770 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/28-18:32:58.042706 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:62516 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:33026 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/28-18:33:00.541490 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:62540 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:33282 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-19:47:16.901950 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:57470 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:19977 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-19:47:18.997680 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:57474 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:20233 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-19:47:55.719567 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:57532 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:20489 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-19:47:57.999155 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:57535 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:20745 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-19:48:07.250586 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:57590 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:21001 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-19:48:09.499563 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:57594 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:21257 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-19:48:22.040729 192.168.1.100 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:32548 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:18691 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-19:48:24.347000 192.168.1.100 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:32549 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:18947 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-19:48:26.847841 192.168.1.100 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:32551 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:19203 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-19:48:29.347272 192.168.1.100 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:32552 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:19459 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-20:01:16.550077 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:58886 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:22025 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-20:01:19.006153 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:58892 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:22281 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-20:01:27.805252 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:58914 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:22537 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-20:01:30.006732 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:58917 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:22793 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-20:01:40.289947 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:46698 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:23554 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-20:01:42.490176 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:46699 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:23810 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-20:01:44.991735 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:46701 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:24066 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-20:01:47.490694 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:46702 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:24322 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-20:01:55.729635 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:58998 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:23049 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-20:01:58.007729 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:59001 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:23305 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-20:02:07.240110 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:59017 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:23561 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-20:02:09.488138 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:59021 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:23817 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-21:20:46.040191 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:1572 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:29705 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-21:20:48.048157 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:1576 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:29961 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-21:20:57.284524 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:1595 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:30217 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-21:20:59.548596 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:1599 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:30473 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-21:21:20.813011 192.168.1.102 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:13604 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:27650 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-21:21:23.209566 192.168.1.102 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:13605 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:27906 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-21:21:24.739067 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:1643 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:30729 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-21:21:25.710512 192.168.1.102 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:13607 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:28162 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-21:21:27.049533 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:1682 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:30985 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-21:21:28.209827 192.168.1.102 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:13608 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:28418 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-21:21:36.301208 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:1698 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:31241 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-21:21:38.549959 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:1702 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:31497 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-21:22:00.213975 192.168.1.101 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:9692 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:15360 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-21:22:02.380477 192.168.1.101 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:9695 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:15616 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-21:22:04.881418 192.168.1.101 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:9700 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:15872 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-21:22:07.380741 192.168.1.101 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:9705 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:16128 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-21:30:57.868963 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:2613 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:32265 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-21:31:00.058968 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:2616 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:32521 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-21:31:36.718283 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:2673 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:32777 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-21:31:39.060335 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:2676 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:33033 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-21:31:48.311981 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:2692 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:33289 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-21:31:50.560168 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:2696 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:33545 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-21:32:53.205026 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:7912 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:30210 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-21:41:41.822743 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:20906 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:35081 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-21:41:44.080149 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:20909 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:35337 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-21:42:20.714216 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:20967 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:35593 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-21:42:23.071451 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:20970 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:35849 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-21:42:32.323797 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:21020 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:36105 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/11-21:42:34.572026 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:21024 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:36361 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/12-00:35:02.688335 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:27574 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:45321 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/12-00:35:05.180581 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:27575 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:45577 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/12-00:35:41.840668 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:27595 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:45833 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/12-00:35:44.181999 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:27596 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:46089 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/12-00:35:53.434533 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:27603 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:46345 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/12-00:35:55.682413 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:27604 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:46601 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/12-08:06:32.274031 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:47215 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:42763 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/12-08:06:34.637300 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:47222 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:43019 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/12-08:06:43.889964 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:47254 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:43275 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/12-08:06:46.138021 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:47261 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:43531 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/12-08:07:52.400579 192.168.1.101 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:56326 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:46592 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/12-08:07:52.401755 192.168.1.101 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:56328 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:46848 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/12-08:32:28.037203 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:373 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:8204 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/12-08:32:30.160312 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:380 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:8716 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/12-08:32:39.412750 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:487 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:10764 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/12-08:32:41.660448 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:502 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:11276 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/12-08:32:48.664259 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:583 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:12812 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/12-08:32:51.160970 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:610 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:13324 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/12-08:32:59.929185 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:707 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:15116 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/12-08:33:02.161506 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:729 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:15884 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/12-08:33:10.710238 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:817 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:17676 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/12-08:33:13.161786 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:860 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:18188 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/12-08:33:15.663657 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:919 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:18956 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/12-08:33:18.161941 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:983 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:19468 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/12-08:34:16.174734 192.168.1.102 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:18808 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:39682 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/12-08:34:18.250660 192.168.1.102 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:18809 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:39938 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/12-08:34:20.751399 192.168.1.102 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:18811 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:40194 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/12-08:34:23.250913 192.168.1.102 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:18812 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:40450 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-17:04:36.533527 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:29944 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:33295 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-17:04:38.630126 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:29945 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:33551 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-17:05:15.290366 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:29963 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:33807 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-17:05:17.630834 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:29966 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:34063 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-17:05:24.634640 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:29972 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:34319 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-17:05:27.131207 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:29975 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:34575 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-17:05:29.633284 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:29977 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:34831 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-17:05:32.131481 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:29985 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:35087 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-17:54:01.847442 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:20749 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:39695 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-17:54:04.161362 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:20750 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:39951 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-17:54:40.805373 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:20770 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:40207 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-17:54:43.162771 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:20771 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:40463 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-17:54:50.166608 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:20776 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:40719 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-17:54:52.663043 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:20779 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:40975 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-17:54:55.165206 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:20781 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:41231 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-17:54:57.663260 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:20782 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:41487 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-17:55:58.293715 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:20789 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:41743 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-17:56:00.665568 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:20790 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:41999 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-17:56:03.167669 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:20792 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:42255 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-17:56:05.665709 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:20793 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:42511 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-20:36:12.654407 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:2421 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:60160 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-20:36:15.068041 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:2423 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:60416 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-20:36:48.143345 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:23694 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:53519 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-20:36:50.335637 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:23695 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:53775 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-20:36:57.339454 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:23700 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:54031 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-20:36:59.836102 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:23703 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:54287 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-20:37:02.338044 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:23705 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:54543 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-20:37:04.836216 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:23706 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:54799 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-20:44:19.650055 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:23882 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:56079 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-20:44:21.850757 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:23883 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:56335 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-20:44:28.834669 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:23893 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:56591 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-20:44:31.331112 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:23896 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:56847 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-20:44:33.833095 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:23898 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:57103 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-20:44:36.331268 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:23899 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:57359 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-20:59:19.915238 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:24365 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:58383 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-20:59:22.341656 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:24366 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:58639 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-20:59:29.345557 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:24371 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:58895 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-20:59:31.841981 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:24374 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:59151 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-20:59:34.344138 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:24376 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:59407 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/14-20:59:36.842226 192.168.1.4 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:24377 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:59663 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/21-16:29:56.114954 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:2649 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:20231 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/21-16:29:58.597631 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:2650 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:20487 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:469:1] ICMP PING NMAP [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/21-16:30:08.413811 192.168.1.4 -> 192.168.1.2
ICMP TTL:128 TOS:0x0 ID:43998 IpLen:20 DgmLen:28
Type:8 Code:0 ID:512 Seq:58881 ECHO
[Xref => http://www.whitehats.com/info/IDS162]
[**] [1:469:1] ICMP PING NMAP [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/21-16:30:13.470390 192.168.1.4 -> 192.168.1.2
ICMP TTL:128 TOS:0x0 ID:43999 IpLen:20 DgmLen:28
Type:8 Code:0 ID:512 Seq:59137 ECHO
[Xref => http://www.whitehats.com/info/IDS162]
[**] [1:469:1] ICMP PING NMAP [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/21-16:30:18.970564 192.168.1.4 -> 192.168.1.2
ICMP TTL:128 TOS:0x0 ID:44000 IpLen:20 DgmLen:28
Type:8 Code:0 ID:512 Seq:59393 ECHO
[Xref => http://www.whitehats.com/info/IDS162]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/21-16:30:35.337054 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:2677 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:20743 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/21-16:30:37.601239 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:2678 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:20999 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/21-16:30:46.853592 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:2685 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:21255 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:466:1] ICMP L3retriever Ping [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/21-16:30:49.102336 192.168.1.3 -> 192.168.1.2
ICMP TTL:32 TOS:0x0 ID:2686 IpLen:20 DgmLen:60
Type:8 Code:0 ID:512 Seq:21511 ECHO
[Xref => http://www.whitehats.com/info/IDS311]
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/03-17:03:10.301102 129.137.195.67:1447 -> 192.168.1.2:20
TCP TTL:107 TOS:0x0 ID:21176 IpLen:20 DgmLen:1420 DF
***A**** Seq: 0x4EAC480C Ack: 0xFA615316 Win: 0x2058 TcpLen: 20
Go to: overview page
SnortSnarf brought to you courtesy of Silicon Defense
Authors: Jim Hoagland and Stuart Staniford
See also the Snort Page by Marty Roesch
Page generated at Tue Jun 17 09:09:54 2003