FrontPage Events

["Bradley, Paul" <paulb () cta com>]

I am seeing quite a bit of the _vti_rpc, _vti_inf, and _vti_bin events in my
SNORT logs.  I am a little confused on exactly what would trigger these -
being that some of the sources are "trusted" hosts.  I am also not having
much luck finding good info on the web that explains what these events are
and the types of events that trigger them (or if they are false positives,
etc.).  Can someone recommend a good resource so that I may investigate
these events further.

Thanks,

Paul

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users