Snort mailing list archives

127.0.0.1


From: "Snort Man" <aa () magic net pk>
Date: Thu, 1 Apr 2004 12:36:15 +0500

Dear All
I am new to this snort thing. I installed snort and 70% of the traffice is as follows.. loopback address port 80 is 
sending  requests to internal and external addresses.
can anybody please explaing what is this ??

                                ID    Signature                Timestamp    Source   
      Address       Dest.
       Address               Layer 4
      Proto  

             #1822-(1-1932)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:06:21        
127.0.0.1:80        Internal&External Global IP.40:1519        TCP     
            #1823-(1-1933)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:06:55        
127.0.0.1:80        Internal&External Global IP.40:1193        TCP     
            #1824-(1-1936)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:07:42        
127.0.0.1:80        Internal&External Global IP.19:1976        TCP     
            #1825-(1-1937)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:08:07        
127.0.0.1:80        Internal&External Global IP.127:1766        TCP     
            #1826-(1-1938)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:08:14        
127.0.0.1:80        Internal&External Global IP.40:1924        TCP     
            #1827-(1-1939)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:08:22        
127.0.0.1:80        Internal&External Global IP.127:1766        TCP     
            #1828-(1-1940)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:09:03        
127.0.0.1:80        Internal&External Global IP.19:1883        TCP     
            #1829-(1-1941)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:09:28        
127.0.0.1:80        Internal&External Global IP.40:1124        TCP     
            #1830-(1-1942)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:09:38        
127.0.0.1:80        Internal&External Global IP.40:1183        TCP     
            #1831-(1-1943)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:10:44        
127.0.0.1:80        Internal&External Global IP.40:1801        TCP     
            #1832-(1-1944)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:11:33        
127.0.0.1:80        Internal&External Global IP.127:1143        TCP     
            #1833-(1-1945)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:12:44        
127.0.0.1:80        Internal&External Global IP.40:1738        TCP     
            #1834-(1-1946)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:13:08        
127.0.0.1:80        Internal&External Global IP.34:1460        TCP     
            #1835-(1-1947)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:13:43        
127.0.0.1:80        Internal&External Global IP.34:1453        TCP     
            #1836-(1-1948)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:14:51        
127.0.0.1:80        Internal&External Global IP.34:1691        TCP     
            #1837-(1-1949)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:15:58        
127.0.0.1:80        Internal&External Global IP.56:1739        TCP     
            #1838-(1-1950)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:16:45        
127.0.0.1:80        Internal&External Global IP.39:1477        TCP     
            #1839-(1-1951)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:16:46        
127.0.0.1:80        Internal&External Global IP.34:1618        TCP     
            #1840-(1-1952)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:17:18        
127.0.0.1:80        Internal&External Global IP.19:1250        TCP     
            #1841-(1-1953)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:18:19        
127.0.0.1:80        Internal&External Global IP.39:1977        TCP     
            #1842-(1-1954)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:18:20        
127.0.0.1:80        Internal&External Global IP.19:1056        TCP     
            #1843-(1-1955)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:20:13        
127.0.0.1:80        Internal&External Global IP.19:1398        TCP     
            #1844-(1-1956)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:20:17        
127.0.0.1:80        Internal&External Global IP.19:1155        TCP     
            #1845-(1-1957)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:20:34        
127.0.0.1:80        Internal&External Global IP.22:1736        TCP     
            #1846-(1-1958)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:20:59        
127.0.0.1:80        Internal&External Global IP.40:1671        TCP     
            #1847-(1-1959)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:21:14        
127.0.0.1:80        Internal&External Global IP.19:1685        TCP     
            #1848-(1-1960)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:21:39        
127.0.0.1:80        Internal&External Global IP.22:1651        TCP     
            #1849-(1-1961)        url[snort] BAD-TRAFFIC loopback traffic        2004-03-18 22:21:39        
127.0.0.1:80        Internal&External Global IP.40:1496        TCP     

Current thread: