ATTACK-RESPONSES id check returned userid

[Roelf Schreurs <rosc () imc nl>]

Hi

When we connect to one specific website, www.marca.com, I get a lot of
alerts.
The source adress is my NAT'ed address and the destination is the IP of
this website.

Can somebody please explain why I get this as an alert.

Thanks

ID              = #0-(1-355)
SIGNATURE       = ATTACK-RESPONSES id check returned userid     
TIMESTAMP       = 2003-06-17 09:30:34
SOURCE IP       = $MY_NAT_IP:57967      
DEST IP         = 212.80.128.10:80
LAYER 4 PROTO   = TCP


-- 
Roelf



-------------------------------------------------------
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users