Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

IPS singature 2151 (large icmp packet )

Hi,

If i want this signature to produce alert when recieve packet size within range 2000-3000 only, i will modify the packet size length for this range. My question is it need to make this value as 2000-3000 or there is an offsec i should keep it on my mind (24 bytes) so the value should be 1986-3204. please advice ???

Thanks

2 REPLIES
Silver

Re: IPS singature 2151 (large icmp packet )

There is no such thing called as offsec . Always large range [1986-3204] would help in better scanning and analyzing the network.

New Member

Re: IPS singature 2151 (large icmp packet )

Hi,

Hope fine. Can you pls tell me how can I mitigate Large_ICMP Alert in my firewall. What would be the best suited mitigation process/ work around to solve this.

Thanks

adnan

152
Views
0
Helpful
2
Replies