Snort mailing list archives
Re: attacks
From: Joerg Weber <j.weber () infos de>
Date: 15 Sep 2003 16:00:27 +0200
Hi,
Hi, In my acid GUI i can see attacks from: Http://199.107.65.177 with SID:498 And if i put that ip number in my browser i get on the snort site!
Have a look at the rule and see what it does. And I dare to bet that this mail will trigger your snort as well, as it contains the string uid=0(root) as well :) Cheers! Joerg -- Joerg Weber Network Security infoServe GmbH Nell-Breuning-Allee 6 D-66115 Saarbruecken T: (0681) 8 80 08 - 0 F: (0681) 8 80 08 - 33 www.infos.de E: j.weber () infos de
Attachment:
signature.asc
Description: This is a digitally signed message part
Current thread:
- attacks Philippe Dhont (Sea-ro) (Sep 15)
- Re: attacks Joerg Weber (Sep 15)
- <Possible follow-ups>
- RE: attacks Robert Reid (Sep 15)