Snort mailing list archives

Arghh...how do I stop it doing this!!


From: "Dave Fitches" <sticks.au () bigfoot com>
Date: Fri, 4 May 2001 01:40:44 +1000


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



Active System Attack Alerts
=-=-=-=-=-=-=-=-=-=-=-=-=-=
[**] MISC source port 53 to <1023 [**]
05/04-00:04:47.283946 209.235.102.13:53 -> 203.164.xxx.xxx:53
UDP TTL:237 TOS:0x0 ID:50935 IpLen:20 DgmLen:460 DF
[**] MISC source port 53 to <1023 [**]
05/04-00:04:47.542673 209.235.102.12:53 -> 203.164.xxx.xxx:53
UDP TTL:237 TOS:0x0 ID:21123 IpLen:20 DgmLen:137 DF

[...etc...]

Damn thing seems to read every DNS query _I_ do as a bloody alert notable
event!!
ARRGHH!!!

- -

    = Dave Fitches =

________________________________________________________
 ,--__|\    David Fitches
/       \   * ICQ : 2120090   * SATCO CID : 955589
\_,--\__/   * Mobile : +61-419-466-744
       v    * E-mail : sticks.au () bigfoot com
               Melbourne, Victoria, Australia
               Web: http://www.bigfoot.com/~sticks.au/
_______________________________________________________
Please Note: Unless this e-mail has been sent as PRIVATE, PERSONAL or
CONFIDENTIAL, the receiver may forward copies of it on the condition  that
they send an advisory message to the original sender.
If however the message has been marked PRIVATE, PERSONAL or CONFIDENTIAL
prior consent MUST be obtained before the message can be forwarded.
-----BEGIN PGP SIGNATURE-----
Version: PGP 7.0.1

iQA/AwUBOvF7/AUhkO6Zt2EDEQJ7OQCfZ+icUliohAoa0ngfiVky5NAF56AAoNYS
5HbyjuQ87SEZ+qj/5hDAoCsb
=UK1c
-----END PGP SIGNATURE-----


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: