Security Basics mailing list archives

Re: snort reports not understood

From: "the.soylent" <the.soylent () gmail com>
Date: Mon, 12 Dec 2005 23:15:33 +0100

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



maybe it is "skype"?
(skype.com)
skype make similar entrys here..
greetz soylent

Glenn English schrieb:

Snort is saying (with many different IPs):

671  12.119.69.198    192.168.20.218   
  ICMP Destination Unreachable Communication Administratively Prohibited
 48  192.168.20.218   70.150.65.36     (portscan) UDP Portsweep

192.168.20.218 is my server on the DMZ. 
12... is in ATT. 
70... is in bellsouth. 

These messages don't make sense to me. Can anyone supply a cluebat?

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDnfaEY86qEhC92cgRAmWRAJ95J5ZcE8pAuMaAMloJuQTI2AwcxACfQ4AQ
AVrCLFKmj81qNampRMXFL9A=
=nNGN
-----END PGP SIGNATURE-----

Current thread:

snort reports not understood Glenn English (Dec 12)
- Re: snort reports not understood the.soylent (Dec 12)