Using ACID

191

6.3.3

Alert Details

Figure 6 6 shows details about a particular ICMP packet that you would see when

you click on an alert as shown in Figure 6 5. As you can see, there are different sections

on the page. Each section displays a particular layer of the data packet. The topmost

section provides general information about the alert. The IP section displays all parts of

the IP header. The ICMP header displays ICMP data, followed by the payload. Payload

is displayed both in hexadecimal and ASCII text. Refer to Appendix C for information

about different protocol headers.

Figure 6 6 

Alert detail.