Snort mailing list archives
alert file problem
From: Ganu Skop <skopganu () yahoo com>
Date: Thu, 20 Jun 2002 00:15:56 -0700 (PDT)
hi all, lately been getting an alert file with wrong classification - it doesn't match classification-config at all such as (syslog file) Jun 20 11:13:12 xxx host: [1:1765:2] WEB-CGI Nortel Contivity cgiproc access [Classification: \240m)] [Prio rity: 2]: {TCP} x.x.x.x:3455 -> y.y.y.y:80 Jun 20 11:13:13 xxx host: [1:1215:5] WEB-CGI ministats admin access [Classification: \240m)] [Priority: 2]: {TCP} x.x.x.x:3482 -> y.y.y.y:80 it stated that [Classification: \240m)] - any idea ? ===== //skopganu __________________________________________________ Do You Yahoo!? Yahoo! - Official partner of 2002 FIFA World Cup http://fifaworldcup.yahoo.com ------------------------------------------------------- Bringing you mounds of caffeinated joy >>> http://thinkgeek.com/sf <<< _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- alert file problem Ganu Skop (Jun 20)