Snort mailing list archives
RE: mrtg machine
From: "Slighter, Tim" <tslighter () itc nrcs usda gov>
Date: Mon, 21 Apr 2003 08:05:07 -0600
just rewrite the rule as: alert udp !10.1.1.x any -> $HOME_NET 162 (msg:"SNMP trap udp"....... -----Original Message----- From: Ben Whittaker [mailto:ben_whittaker () yahoo com] Sent: Sunday, April 20, 2003 1:00 PM To: snort-users () lists sourceforge net Subject: [Snort-users] mrtg machine snort: [1:1417:2] SNMP request udp [Classification: Attempted Information Leak] [Priority: 2]: {UDP} 10.1.1.x:39629 -> x.x..x.x:161 This is my machine running MRTG how do I stop it from logging. _____ Do you Yahoo!? The New <http://us.rd.yahoo.com/search/mailsig/*http://search.yahoo.com> Yahoo! Search - Faster. Easier. Bingo.
Current thread:
- mrtg machine Ben Whittaker (Apr 20)
- Rule help Please Ben Whittaker (Apr 21)
- <Possible follow-ups>
- RE: mrtg machine Slighter, Tim (Apr 21)