PDA

View Full Version : ICMP redirect host


quatertech
01-30-2006, 01:06 AM
Hi!

In the last few days, the Snort IDS installed on my server is logging thousands of ICMP Redirect Host (http://www.snort.org/pub-bin/sigs.cgi?sid=472) from the IP address 207.210.74.1.
What is the reason for this weird situation? Should I consider this as a problem?

Thanks
Paolo

matta
01-30-2006, 01:43 AM
This is normal, it is the RouteScience device optimizing traffic.

AndrewKT
02-05-2006, 06:55 PM
Should we be using the data provided to update our routing in some way? (I mean, isn't that why it's talking to us, telling us a better route exists?)

If so, is there a way to authenticate the source of these messages?