SNORT - Unusual ping detected

[ciscoboy]

Hi !

Good day.

Im new to Pfsense & just recently installed Squid & Snort. Squid is working properly w/ whiltelist. But Im having problem with snort. I received alerts ->  PROTOCOL-ICMP Unusual PING detected. Ping from ISP -> LAN Gateway

Any advice is highly appreciated.

Thank you.

[bmeeks]

@ciscoboy:

Hi !

Good day.

Im new to Pfsense & just recently installed Squid & Snort. Squid is working properly w/ whiltelist. But Im having problem with snort. I received alerts ->  PROTOCOL-ICMP Unusual PING detected. Ping from ISP -> LAN Gateway

Any advice is highly appreciated.

Thank you.

According to this recent update from the Snort VRT folks –- http://23.21.0.12/vrt/docs/ruleset_changelogs/2956/changes-2014-02-06.html –-
that rule should be disabled.  Did you manually enable it?

Bill

[ciscoboy]

Thanks a lot Bill..!