Snort mailing list archives

Snort.alert log


From: Kristof Goossens <kristof () xssass be>
Date: Fri, 15 Nov 2002 09:00:53 +0100

Hello,

I've read the following in my snort.alert log:

[**] [116:46:1] (snort_decoder) WARNING: TCP Data Offset is less than 5! [**]
11/13-21:21:31.736604 200.207.87.24:0 -> 80.84.232.115:0
TCP TTL:117 TOS:0x0 ID:19244 IpLen:20 DgmLen:40
*******F Seq: 0x3A6D74  Ack: 0x1000010  Win: 0x0  TcpLen: 0

I don't know what this means however... Specially the ports seam strange to me.
Any help would be appreciated!

Thanks in advance,
        Kristof Goossens

PS: Please, explicitly include my address as I am not subscribed to this list...

-- 
Digital fingerprint: F56F F987 0E0C AFF8 0B6D  7CA1 F152 E07D 72AF 337B

Attachment: _bin
Description:


Current thread: