Snort mailing list archives
Question?
From: "James Friesen" <lucretia () telusplanet net>
Date: Fri, 10 Aug 2001 08:07:23 -0600
Hi again. Ok, confirmed action. The following alert was syslog'd and notification worked ok. **] EXPLOIT x86 NOOP [**] 08/10-08:02:53.826902 207.46.235.150:80 -> 192.168.0.21:1720 TCP TTL:255 TOS:0x0 ID:0 IpLen:20 DgmLen:2841 ***AP*** Seq: 0x0 Ack: 0x0 Win: 0x0 TcpLen: 20 But nothing logged to MySQL database, nor alerts posted to ACID (obviously). Any suggestions would be appreciated. Thanks. _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: http://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Re: External snort monitoring, (continued)
- Re: External snort monitoring Security @ Monster-Solutions.Net (Aug 08)
- RE: External snort monitoring swilcoxon (Aug 08)
- FAQ 10/100 Hubs Block Other Speed Traffic (was: RE: External snort monitoring) Dragos Ruiu (Aug 08)
- RE: FAQ 10/100 Hubs Block Other Speed Traffic (was: RE: External snort monitoring) Franki (Aug 08)
- RE: FAQ 10/100 Hubs Block Other Speed Traffic Erek Adams (Aug 08)
- RE: FAQ 10/100 Hubs Block Other Speed Traffic (was: RE: External snort monitoring) Rich Adamson (Aug 08)
- Re: FAQ 10/100 Hubs Block Other Speed Traffic (was: RE: External snort monitoring) Ramin Alidousti (Aug 08)
- RE: FAQ 10/100 Hubs Block Other Speed Traffic (was: RE: [Snort-users] External snort monitoring) Jason (Aug 08)
- RE: RE: FAQ 10/100 Hubs Block Other Speed Traffic (was: RE: [Snort-users] External snort monitoring) James Friesen (Aug 09)
- RE: RE: FAQ 10/100 Hubs Block Other Speed Traffic (was: RE: [Snort-users] External snort monitoring) James Friesen (Aug 10)
- Question? James Friesen (Aug 10)
- Re: Question? Jed Pickel (Aug 10)
- CODE RED III Mark Spieth (Aug 10)
- Re: CODE RED III Mike Baptiste (Aug 10)
- FAQ 10/100 Hubs Block Other Speed Traffic (was: RE: External snort monitoring) Dragos Ruiu (Aug 08)
- Re: FAQ 10/100 Hubs Block Other Speed Traffic (was: RE: [Snort-users] External snort monitoring) Jim Hankins (Aug 08)
- Re: FAQ 10/100 Hubs Block Other Speed Traffic stefmit (Aug 08)
- Re: FAQ 10/100 Hubs Block Other Speed Traffic Murphy (Aug 08)
- Re: Re: FAQ 10/100 Hubs Block Other Speed Traffic Dragos Ruiu (Aug 09)
- Re: Re: FAQ 10/100 Hubs Block Other Speed Traffic Larry E. Smith Jr. (Aug 09)
- Re: Re: FAQ 10/100 Hubs Block Other Speed Traffic Jeff Ito (Aug 09)
- Re: Re: FAQ 10/100 Hubs Block Other Speed Traffic Larry E. Smith Jr. (Aug 09)