Snort mailing list archives

127.0.0.1


From: "Snort Man" <aa () magic net pk>
Date: Wed, 31 Mar 2004 11:23:01 +0500

Dear All
I am new to this snort thing. I installed snort and 70% of the traffice is as follows.. loopback address port 80 is 
sending  requests to internal and external addresses.
can anybody please explaing what is this ??

                               ID   < Signature >               < Timestamp >   < Source
      Address >   < Dest.
      Address >             < Layer 4
      Proto >  

             #1822-(1-1932)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:06:21        
127.0.0.1:80        Internal&External Global IP.40:1519        TCP     
            #1823-(1-1933)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:06:55        
127.0.0.1:80        Internal&External Global IP.40:1193        TCP     
            #1824-(1-1936)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:07:42        
127.0.0.1:80        Internal&External Global IP.19:1976        TCP     
            #1825-(1-1937)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:08:07        
127.0.0.1:80        Internal&External Global IP.127:1766        TCP     
            #1826-(1-1938)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:08:14        
127.0.0.1:80        Internal&External Global IP.40:1924        TCP     
            #1827-(1-1939)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:08:22        
127.0.0.1:80        Internal&External Global IP.127:1766        TCP     
            #1828-(1-1940)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:09:03        
127.0.0.1:80        Internal&External Global IP.19:1883        TCP     
            #1829-(1-1941)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:09:28        
127.0.0.1:80        Internal&External Global IP.40:1124        TCP     
            #1830-(1-1942)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:09:38        
127.0.0.1:80        Internal&External Global IP.40:1183        TCP     
            #1831-(1-1943)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:10:44        
127.0.0.1:80        Internal&External Global IP.40:1801        TCP     
            #1832-(1-1944)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:11:33        
127.0.0.1:80        Internal&External Global IP.127:1143        TCP     
            #1833-(1-1945)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:12:44        
127.0.0.1:80        Internal&External Global IP.40:1738        TCP     
            #1834-(1-1946)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:13:08        
127.0.0.1:80        Internal&External Global IP.34:1460        TCP     
            #1835-(1-1947)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:13:43        
127.0.0.1:80        Internal&External Global IP.34:1453        TCP     
            #1836-(1-1948)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:14:51        
127.0.0.1:80        Internal&External Global IP.34:1691        TCP     
            #1837-(1-1949)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:15:58        
127.0.0.1:80        Internal&External Global IP.56:1739        TCP     
            #1838-(1-1950)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:16:45        
127.0.0.1:80        Internal&External Global IP.39:1477        TCP     
            #1839-(1-1951)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:16:46        
127.0.0.1:80        Internal&External Global IP.34:1618        TCP     
            #1840-(1-1952)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:17:18        
127.0.0.1:80        Internal&External Global IP.19:1250        TCP     
            #1841-(1-1953)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:18:19        
127.0.0.1:80        Internal&External Global IP.39:1977        TCP     
            #1842-(1-1954)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:18:20        
127.0.0.1:80        Internal&External Global IP.19:1056        TCP     
            #1843-(1-1955)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:20:13        
127.0.0.1:80        Internal&External Global IP.19:1398        TCP     
            #1844-(1-1956)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:20:17        
127.0.0.1:80        Internal&External Global IP.19:1155        TCP     
            #1845-(1-1957)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:20:34        
127.0.0.1:80        Internal&External Global IP.22:1736        TCP     
            #1846-(1-1958)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:20:59        
127.0.0.1:80        Internal&External Global IP.40:1671        TCP     
            #1847-(1-1959)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:21:14        
127.0.0.1:80        Internal&External Global IP.19:1685        TCP     
            #1848-(1-1960)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:21:39        
127.0.0.1:80        Internal&External Global IP.22:1651        TCP     
            #1849-(1-1961)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:21:39        
127.0.0.1:80        Internal&External Global IP.40:1496        TCP     

Current thread: