Snort mailing list archives
127.0.0.1
From: "Snort Man" <aa () magic net pk>
Date: Wed, 31 Mar 2004 11:23:01 +0500
Dear All I am new to this snort thing. I installed snort and 70% of the traffice is as follows.. loopback address port 80 is sending requests to internal and external addresses. can anybody please explaing what is this ?? ID < Signature > < Timestamp > < Source Address > < Dest. Address > < Layer 4 Proto > #1822-(1-1932) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:06:21 127.0.0.1:80 Internal&External Global IP.40:1519 TCP #1823-(1-1933) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:06:55 127.0.0.1:80 Internal&External Global IP.40:1193 TCP #1824-(1-1936) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:07:42 127.0.0.1:80 Internal&External Global IP.19:1976 TCP #1825-(1-1937) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:08:07 127.0.0.1:80 Internal&External Global IP.127:1766 TCP #1826-(1-1938) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:08:14 127.0.0.1:80 Internal&External Global IP.40:1924 TCP #1827-(1-1939) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:08:22 127.0.0.1:80 Internal&External Global IP.127:1766 TCP #1828-(1-1940) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:09:03 127.0.0.1:80 Internal&External Global IP.19:1883 TCP #1829-(1-1941) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:09:28 127.0.0.1:80 Internal&External Global IP.40:1124 TCP #1830-(1-1942) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:09:38 127.0.0.1:80 Internal&External Global IP.40:1183 TCP #1831-(1-1943) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:10:44 127.0.0.1:80 Internal&External Global IP.40:1801 TCP #1832-(1-1944) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:11:33 127.0.0.1:80 Internal&External Global IP.127:1143 TCP #1833-(1-1945) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:12:44 127.0.0.1:80 Internal&External Global IP.40:1738 TCP #1834-(1-1946) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:13:08 127.0.0.1:80 Internal&External Global IP.34:1460 TCP #1835-(1-1947) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:13:43 127.0.0.1:80 Internal&External Global IP.34:1453 TCP #1836-(1-1948) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:14:51 127.0.0.1:80 Internal&External Global IP.34:1691 TCP #1837-(1-1949) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:15:58 127.0.0.1:80 Internal&External Global IP.56:1739 TCP #1838-(1-1950) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:16:45 127.0.0.1:80 Internal&External Global IP.39:1477 TCP #1839-(1-1951) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:16:46 127.0.0.1:80 Internal&External Global IP.34:1618 TCP #1840-(1-1952) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:17:18 127.0.0.1:80 Internal&External Global IP.19:1250 TCP #1841-(1-1953) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:18:19 127.0.0.1:80 Internal&External Global IP.39:1977 TCP #1842-(1-1954) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:18:20 127.0.0.1:80 Internal&External Global IP.19:1056 TCP #1843-(1-1955) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:20:13 127.0.0.1:80 Internal&External Global IP.19:1398 TCP #1844-(1-1956) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:20:17 127.0.0.1:80 Internal&External Global IP.19:1155 TCP #1845-(1-1957) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:20:34 127.0.0.1:80 Internal&External Global IP.22:1736 TCP #1846-(1-1958) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:20:59 127.0.0.1:80 Internal&External Global IP.40:1671 TCP #1847-(1-1959) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:21:14 127.0.0.1:80 Internal&External Global IP.19:1685 TCP #1848-(1-1960) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:21:39 127.0.0.1:80 Internal&External Global IP.22:1651 TCP #1849-(1-1961) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:21:39 127.0.0.1:80 Internal&External Global IP.40:1496 TCP
Current thread:
- 127.0.0.1 Snort Man (Mar 30)