Snort mailing list archives

Log entry question


From: "Chris Mason" <masonc () masonc com>
Date: Mon, 13 Aug 2001 13:39:04 -0400

I keep seeing these in my logs, what do they mean?

Aug 13 13:42:57 artemis snort[13355]: [1:515:2]  MISC source port 53 to
<1024 [Classification: Potentially Bad Traffic   Priority: 2]:
216.xxx.168.66:53 -> 206.xxx.192.104:53


Chris Mason
masonc () masonc com
Box 340, The Valley, Anguilla, British West Indies
Tel: 264 497 5670 Fax: 264 497 8463
Take a virtual tour of the island
http://www.anguillaguide.com/ The Anguilla Guide
Find your perfect rental villa www.mycaribbean.com
Talk to me in real time with Instant Messenger: masonc92 () hotmail com
or ICQ 118159388
Signature F331 8AD1 36FB B3B0 DF9F  D95B 8024 D1EA 7450 D50C


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: