[Dshield] ping reports?

Kelly Martin kellym at fb.org
Wed Aug 20 19:31:35 GMT 2003


My ICMP reports are being rejected now as invalid.  My submission engine reports ICMP traffic with the source port set to the ICMP type (for ping, 8) and the destination port to the ICMP subtype (for ping, 0) as per the specification on the website.

Has the specification for reporting ICMP traffic changed?  If so, what is it now?

Kelly



More information about the list mailing list