[Silicon Defense logo]

SnortSnarf signature page

ICMP Destination Unreachable (Communication Administratively Prohibited)

SnortSnarf v021111.1

Signature section (91123)Top 20 source IPsTop 20 dest IPs

117 alerts with this signature using input module SnortFileInput, with sources:

Earliest such alert at 20:26:58.416448 on 04/22/2003
Latest such alert at 18:11:35.597433 on 06/12/2003

ICMP Destination Unreachable (Communication Administratively Prohibited) 13 sources 4 destinations
Priority: 3Classification: Misc activity
[sid:485]

Sources triggering this attack signature

Source# Alerts (sig)# Alerts (total)# Dsts (sig)# Dsts (total)
172.20.148.50515122
172.20.148.54383811
10.53.96.1171711
12.126.33.982211
139.130.193.781111
216.136.165.2021111
139.130.193.821111
66.185.140.1701111
193.10.220.1451111
209.17.64.2261111
130.105.3.21111
63.144.64.701111
64.159.2.1351111

Destinations receiving this attack signature

Destinations# Alerts (sig)# Alerts (total)# Srcs (sig)# Srcs (total)
192.168.1.10187951225
192.168.1.105172919
192.168.1.611777010624
192.168.1.4269111

SnortSnarf brought to you courtesy of Silicon Defense
Authors: Jim Hoagland and Stuart Staniford
See also the Snort Page by Marty Roesch
Page generated at Tue Jun 17 09:03:51 2003