Re: what does this mean?

["Larc" <larc () pandora be>]

Hello,
See http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-1999-0509

Regards,
Stefan Dens
----- Original Message -----
From: "lisa foreman" <lisa2lisa () onebox com>
To: <snort-users () lists sourceforge net>
Sent: Wednesday, August 21, 2002 9:22 PM
Subject: [Snort-users] what does this mean?


> [**] WEB-CGI rksh access [**]
> 08/21-15:16:12.241065 0:6:5B:CD:F1:44 -> 0:0:C:E:39:55 type:0x800
len:0x1E6
> 165.x.x.x:1205 -> 207.46.230.220:80 TCP TTL:128 TOS:0x0 ID:17900 IpLen:20
> DgmLen:472 DF
> ***AP*** Seq: 0x9F726659  Ack: 0x2634031F  Win: 0x40B0  TcpLen: 20
> 47 45 54 20 2F 77 69 6E 64 6F 77 73 32 30 30 30  GET /windows2000
> 2F 74 65 63 68 69 6E 66 6F 2F 72 65 73 6B 69 74  /techinfo/reskit
> 2F 65 6E 2F 49 6E 74 77 6F 72 6B 2F 72 6B 73 68  /en/Intwork/rksh
> 61 72 65 64 2E 6A 73 20 48 54 54 50 2F 31 2E 31  ared.js HTTP/1.1
> 0D 0A 41 63 63 65 70 74 3A 20 2A 2F 2A 0D 0A 52  ..Accept: */*..R
> 65 66 65 72 65 72 3A 20 68 74 74 70 3A 2F 2F 77  eferer: http://w
> 77 77 2E 6D 69 63 72 6F 73 6F 66 74 2E 63 6F 6D  ww.microsoft.com
> 2F 77 69 6E 64 6F 77 73 32 30 30 30 2F 74 65 63  /windows2000/tec
> 68 69 6E 66 6F 2F 72 65 73 6B 69 74 2F 65 6E 2F  hinfo/reskit/en/
> 49 6E 74 77 6F 72 6B 2F 69 6E 61 65 5F 69 70 73  Intwork/inae_ips
> 5F 6F 6C 69 71 2E 68 74 6D 0D 0A 41 63 63 65 70  _oliq.htm..Accep
> 74 2D 4C 61 6E 67 75 61 67 65 3A 20 65 6E 2D 75  t-Language: en-u
> 73 0D 0A 41 63 63 65 70 74 2D 45 6E 63 6F 64 69  s..Accept-Encodi
> 6E 67 3A 20 67 7A 69 70 2C 20 64 65 66 6C 61 74  ng: gzip, deflat
> 65 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 4D  e..User-Agent: M
> 6F 7A 69 6C 6C 61 2F 34 2E 30 20 28 63 6F 6D 70  ozilla/4.0 (comp
> 61 74 69 62 6C 65 3B 20 4D 53 49 45 20 35 2E 35  atible; MSIE 5.5
> 3B 20 57 69 6E 64 6F 77 73 20 4E 54 20 35 2E 30  ; Windows NT 5.0
> 3B 20 48 6F 74 62 61 72 20 34 2E 31 2E 32 2E 30  ; Hotbar 4.1.2.0
> 29 0D 0A 48 6F 73 74 3A 20 77 77 77 2E 6D 69 63  )..Host: www.mic
> 72 6F 73 6F 66 74 2E 63 6F 6D 0D 0A 43 6F 6E 6E  rosoft.com..Conn
> 65 63 74 69 6F 6E 3A 20 4B 65 65 70 2D 41 6C 69  ection: Keep-Ali
> 76 65 0D 0A 43 6F 6F 6B 69 65 3A 20 4D 43 31 3D  ve..Cookie: MC1=
> 56 3D 33 26 4C 56 3D 32 30 30 32 38 26 48 41 53  V=3&LV=20028&HAS
> 48 3D 45 44 32 36 26 47 55 49 44 3D 31 45 33 37  H=ED26&GUID=1E37
> 32 36 45 44 42 44 43 32 34 45 33 31 41 45 44 37  26EDBDC24E31AED7
> 43 31 38 41 35 32 34 41 42 42 45 33 0D 0A 0D 0A  C18A524ABBE3....
>
> --
> lisa2lisa () onebox com
>
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by: OSDN - Tired of that same old
> cell phone?  Get a new here for FREE!
> https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------
This sf.net email is sponsored by: OSDN - Tired of that same old
cell phone?  Get a new here for FREE!
https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users