Snort mailing list archives
Re: PLEASE CC ME
From: "Leonard Miller" <Leonard.Miller () udlp com>
Date: Sat, 08 Nov 2003 14:00:57 -0600
Did anybody ever post an answer to this? i was just curious what it was
"Stephan Weaver" <stephanweaver () hotmail com> 11/07/03 09:01 AM >>>
Hello gooday list, I am not on the list so can you guys please CC me at stephanweaver () hotmail com Here goes.... I am having a problem i run snort of the same machine as my proxy server defined home net variable as 192.168.0.0/24. clients using the proxy server are logged in snort as follows... [**] [1:620:3] SCAN Proxy (8080) attempt [**] [Classification: Attempted Information Leak] [Priority: 2] 11/06-16:40:07.970541 192.168.0.9:1117 -> 192.168.0.200:8080 TCP TTL:128 TOS:0x0 ID:41741 IpLen:20 DgmLen:48 DF ******S* Seq: 0x7C3CD1 Ack: 0x0 Win: 0x2000 TcpLen: 28 TCP Options (4) => MSS: 1460 NOP NOP SackOK This is not supposed to be happening. Thanks in Advance Stephan Weaver **********CONFIDENTIALITY NOTICE********** The information contained in this e-mail may be proprietary and/or privileged and is intended for the sole use of the individual or organization named above. If you are not the intended recipient or an authorized representative of the intended recipient, any review, copying or distribution of this e-mail and its attachments, if any, is prohibited. If you have received this e-mail in error, please notify the sender immediately by return e-mail and delete this message from your system. ------------------------------------------------------- This SF.Net email sponsored by: ApacheCon 2003, 16-19 November in Las Vegas. Learn firsthand the latest developments in Apache, PHP, Perl, XML, Java, MySQL, WebDAV, and more! http://www.apachecon.com/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- PLEASE CC ME Stephan Weaver (Nov 07)
- Re: PLEASE CC ME Sean Lazar (Nov 08)
- Re: PLEASE CC ME Erek Adams (Nov 08)
- <Possible follow-ups>
- Re: PLEASE CC ME Leonard Miller (Nov 08)
- Re: PLEASE CC ME Sean Lazar (Nov 08)