Snort mailing list archives
Snort.alert log
From: Kristof Goossens <kristof () xssass be>
Date: Fri, 15 Nov 2002 09:00:53 +0100
Hello, I've read the following in my snort.alert log: [**] [116:46:1] (snort_decoder) WARNING: TCP Data Offset is less than 5! [**] 11/13-21:21:31.736604 200.207.87.24:0 -> 80.84.232.115:0 TCP TTL:117 TOS:0x0 ID:19244 IpLen:20 DgmLen:40 *******F Seq: 0x3A6D74 Ack: 0x1000010 Win: 0x0 TcpLen: 0 I don't know what this means however... Specially the ports seam strange to me. Any help would be appreciated! Thanks in advance, Kristof Goossens PS: Please, explicitly include my address as I am not subscribed to this list... -- Digital fingerprint: F56F F987 0E0C AFF8 0B6D 7CA1 F152 E07D 72AF 337B
Attachment:
_bin
Description:
Current thread:
- Snort.alert log Kristof Goossens (Nov 15)