Snort Forums Archive

Archive Home » Support » Unknown Datagram decoding problem

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

Unknown Datagram decoding problem

Posted by jeroendb on March 28, 2005 23:39:13

I get several errors in the snortlog

[**] [116:108:1] (snort_decoder) Unknown Datagram decoding problem! [**]
03/29/05-09:12:35.163308 -> 194.151.228.50
ICMP TTL:128 TOS:0x0 ID:4709 IpLen:20 DgmLen:29
Type:3 Code:3 DESTINATION UNREACHABLE: PORT UNREACHABLE
ORIGINAL DATAGRAM TRUNCATED
00 00 00 00 45 ....E

is one of our proxyservers.

I get these errors for several internal machines and to two (internet) dns's servers (.50 and .18)

The machines are trying to do a dns request at that time.

Anybody any idea what causes this problem and how to resolve that.
I'm running version snort 2.2.0 at the moment.
The machines giving this error are w2ksp4 machines

regards

jeroen