Snort mailing list archives
Re: snort alert [1:13586:4]
From: waldo kitty <wkitty42 () windstream net>
Date: Tue, 27 Aug 2013 06:43:32 -0400
On 8/26/2013 19:59, Ismi Junita Rahmawati wrote:
my snort show alert "snort alert [1:13586:4]" when I tried to play with SSH. But I don't know what this alert means. Can some body explain it?
look at the rule and read what its MSG says... what port were you using SSH on? if not the default 22, then this rule will fire... -- NOTE: No off-list assistance is given without prior approval. Please keep mailing list traffic on the list unless private contact is specifically requested and granted. ------------------------------------------------------------------------------ Introducing Performance Central, a new site from SourceForge and AppDynamics. Performance Central is your source for news, insights, analysis and resources for efficient Application Performance Management. Visit us today! http://pubads.g.doubleclick.net/gampad/clk?id=48897511&iu=/4140/ostg.clktrk _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- snort alert [1:13586:4] Ismi Junita Rahmawati (Aug 26)
- Re: snort alert [1:13586:4] waldo kitty (Aug 27)
- Re: snort alert [1:13586:4] JJC (Aug 27)
- Re: snort alert [1:13586:4] Ismi Junita Rahmawati (Aug 27)
- Re: snort alert [1:13586:4] JJC (Aug 27)
- Re: snort alert [1:13586:4] waldo kitty (Aug 27)