Snort mailing list archives
Re: possible causes of source and destination ip from external network
From: "Keith W. McCammon" <keith-list () mccammon org>
Date: Mon, 21 Jun 2004 09:24:10 -0400
Address spoofing. Trivial to generate with NMap or a number of other tools.
Annie Green wrote:
Hi allWhat would be the possible causes of the IDS alert that shows source ip and destination ip from external network? Also, why did the router route this packet in the first place?Regards, A. _________________________________________________________________ Find gifts, buy online with MSN Shopping. http://shopping.msn.com.sg/ ------------------------------------------------------- This SF.Net email is sponsored by The 2004 JavaOne(SM) Conference Learn from the experts at JavaOne(SM), Sun's Worldwide Java Developer Conference, June 28 - July 1 at the Moscone Center in San Francisco, CA REGISTER AND SAVE! http://java.sun.com/javaone/sf Priority Code NWMGYKND _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------- This SF.Net email is sponsored by The 2004 JavaOne(SM) Conference Learn from the experts at JavaOne(SM), Sun's Worldwide Java Developer Conference, June 28 - July 1 at the Moscone Center in San Francisco, CA REGISTER AND SAVE! http://java.sun.com/javaone/sf Priority Code NWMGYKND _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- possible causes of source and destination ip from external network Annie Green (Jun 21)
- Re: possible causes of source and destination ip from external network Keith W. McCammon (Jun 21)