Re: [Sguil-users] icmphdr tables

[Jeremy H. <jt...@gm...>]

That makes sense.. we just do'nt have any of the icmp alerts enabled.
that makes perfect sense.

Thanks.

On Tue, Jan 31, 2012 at 3:13 PM, Edward Fjellskål
<edw...@gm...> wrote:
>  From snort I guess (events)
>
> On 01/31/2012 04:10 PM, Jeremy Hoel wrote:
>> What's supposed to feed information into this set of tables?  From the
>> name it's icmp data, but all the sancp stuff goes to the sancp tables.
>>   Is this supposed to be filled from portscan data?  MIne seem to be
>> empty.
>>
>> ------------------------------------------------------------------------------
>> Keep Your Developer Skills Current with LearnDevNow!
>> The most comprehensive online learning library for Microsoft developers
>> is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
>> Metro Style Apps, more. Free future releases when you subscribe now!
>> http://p.sf.net/sfu/learndevnow-d2d
>> _______________________________________________
>> Sguil-users mailing list
>> Sgu...@li...
>> https://lists.sourceforge.net/lists/listinfo/sguil-users
>
>
> ------------------------------------------------------------------------------
> Keep Your Developer Skills Current with LearnDevNow!
> The most comprehensive online learning library for Microsoft developers
> is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
> Metro Style Apps, more. Free future releases when you subscribe now!
> http://p.sf.net/sfu/learndevnow-d2d
> _______________________________________________
> Sguil-users mailing list
> Sgu...@li...
> https://lists.sourceforge.net/lists/listinfo/sguil-users