[Snort-users] Strange PATH MTU Traffic

I am getting this alert: ICMP PATH MTU denial of service

I have never had this alert previous to this weekend, and have received
40,000 within the last 8 hours. Some of this traffic appears to be
encrypted, the rest of it is hitting our domain controllers and contains
schema information.

I know Microsoft does some screwy stuff but I have never seen schema
information transmitted in an ICMP packet, much less a path mtu
discovery packet.

Anyone else seen this type of traffic?
=20
Josh Berry | CISSP GCIA=20
Information Security
214-765-1296
=20
--------------------------------------------------------------------=20
If you spend more on coffee than on IT security, you will be hacked.=20
What's more, you deserve to be hacked.=20
-- (Former) White House Cybersecurity adviser Richard Clarke=20



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users