Snort mailing list archives

False alarm due to wrong byteordering


From: Ralf Hildebrandt <Ralf.Hildebrandt () innominate com>
Date: Tue, 17 Jul 2001 16:02:13 +0200

Today I got this in the log:

Jul 17 08:11:00 stahlw06 snort: MISC loopback traffic [Classification: Potentially Bad Traffic   Priority: 2]: 
127.75.134.169:0 -> 71.92.134.169:0

which is wrong. It should have been:
134.169.127.75:0 -> 134.169.71.92:0 
instead. I assume, there's some error in the byteorder for network
addresses under HP-UX 10.20...

-- 
ralf.hildebrandt () innominate com                            innominate AG
Technical Consultant                   Don't be afraid of what you see -
Diplom-Informatiker                     be afraid of what you don't see!
tel: +49.(0)7000.POSTFIX                        fax: +49.(0)30.308806-77


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: