Snort mailing list archives
Alert Testing
From: Warner Joseph <Joseph.Warner () siemens com>
Date: Thu, 22 Jan 2004 16:32:26 -0500
Hi, I'm using snort-2.1.0 and I just noticed something.. ..I used to be able to do some alert testing by pointing a web browser to my server running snort ala http://myserver/htdocs/scripts/..%5c%5c../winnt/system32/cmd.exe and it would generate WEB-IIS cmd.exe access or similar alerts. I also tried http://myserver/msadcs.dll When I do it now, no alerts are generated. Also, no alerts are generated when I point my browser to any of our other servers. Does anyone know why this isn't triggering alerts? Thanks Joe ------------------------------------------------------------------------------- This message and any included attachments are from Siemens Medical Solutions USA, Inc. and are intended only for the addressee(s). The information contained herein may include trade secrets or privileged or otherwise confidential information. Unauthorized review, forwarding, printing, copying, distributing, or using such information is strictly prohibited and may be unlawful. If you received this message in error, or have reason to believe you are not authorized to receive it, please promptly delete this message and notify the sender by e-mail with a copy to Central.SecurityOffice () shs siemens com Thank you ------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Alert Testing Warner Joseph (Jan 22)
- <Possible follow-ups>
- RE: Alert Testing Warner Joseph (Jan 23)
- FW: Alert Testing Warner Joseph (Jan 27)