Snort mailing list archives

Re: Bad Loop Back Traffic


From: bclark () bwkip com
Date: Tue, 24 Feb 2004 12:01:56 -0500 (EST)

I have also seen this type of traffic about 200,000 alerts last night.  I
am not sure but I think it is a clients Windows machine.


Hello,
    I have an abundance of alerts telling me
url[snort] BAD-TRAFFIC loopback traffic on 127.0.0.1:80
According to snort this is due to improperly configured interfaces.  =
Which part is improperly configured and how can I fix this? Or have I =
been hacked?

-Scott Elgram
IT/Systems Support
VerifPoint/CreDENTALs
(949)770-5290 ext. 26



-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: