Snort mailing list archives

HELP Port 1080 only


From: DThomaz () flowserve com
Date: Thu, 20 Jun 2002 16:47:36 -0600

I just got my snort to work.
Now, my issue is that the only port that the ACID is displaying alerts is
on port 1080

#0-(1-1)        [url] SCAN Proxy attempt        2002-06-20 15:01:03
10.10.16.95:2882        10.10.16.90:1080        TCP
            #1-(1-2)        [url] SCAN Proxy attempt        2002-06-20
15:46:45        10.10.16.95:2595        10.10.16.90:1080        TCP
            #2-(1-3)        [url] SCAN Proxy attempt        2002-06-20
15:51:23        10.10.16.95:3307        10.10.16.90:1080        TCP
            #3-(1-4)        [url] SCAN Proxy attempt        2002-06-20
15:51:28        10.10.16.95:3314        10.10.16.90:1080        TCP
            #4-(1-5)        [url] SCAN Proxy attempt        2002-06-20
15:51:30        10.10.16.95:3321        10.10.16.90:1080        TCP
            #5-(1-6)        [url] SCAN Proxy attempt        2002-06-20
16:09:11        10.10.16.95:3662        10.10.16.90:1080        TCP
            #6-(1-7)        [url] SCAN Proxy attempt        2002-06-20
16:09:14        10.10.16.95:3667        10.10.16.90:1080        TCP
            #7-(1-8)        [url] SCAN Proxy attempt        2002-06-20
16:09:16        10.10.16.95:3673        10.10.16.90:1080        TCP
            #8-(1-9)        [url] SCAN Proxy attempt        2002-06-20
16:24:27        10.10.16.95:4029        10.10.16.90:1080        TCP

Can someone help?

Thanks!



-------------------------------------------------------
Sponsored by:
ThinkGeek at http://www.ThinkGeek.com/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: