Snort mailing list archives
127.0.0.1
From: "Snort Man" <aa () magic net pk>
Date: Thu, 1 Apr 2004 12:36:15 +0500
Dear All I am new to this snort thing. I installed snort and 70% of the traffice is as follows.. loopback address port 80 is sending requests to internal and external addresses. can anybody please explaing what is this ?? ID Signature Timestamp Source Address Dest. Address Layer 4 Proto #1822-(1-1932) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:06:21 127.0.0.1:80 Internal&External Global IP.40:1519 TCP #1823-(1-1933) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:06:55 127.0.0.1:80 Internal&External Global IP.40:1193 TCP #1824-(1-1936) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:07:42 127.0.0.1:80 Internal&External Global IP.19:1976 TCP #1825-(1-1937) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:08:07 127.0.0.1:80 Internal&External Global IP.127:1766 TCP #1826-(1-1938) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:08:14 127.0.0.1:80 Internal&External Global IP.40:1924 TCP #1827-(1-1939) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:08:22 127.0.0.1:80 Internal&External Global IP.127:1766 TCP #1828-(1-1940) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:09:03 127.0.0.1:80 Internal&External Global IP.19:1883 TCP #1829-(1-1941) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:09:28 127.0.0.1:80 Internal&External Global IP.40:1124 TCP #1830-(1-1942) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:09:38 127.0.0.1:80 Internal&External Global IP.40:1183 TCP #1831-(1-1943) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:10:44 127.0.0.1:80 Internal&External Global IP.40:1801 TCP #1832-(1-1944) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:11:33 127.0.0.1:80 Internal&External Global IP.127:1143 TCP #1833-(1-1945) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:12:44 127.0.0.1:80 Internal&External Global IP.40:1738 TCP #1834-(1-1946) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:13:08 127.0.0.1:80 Internal&External Global IP.34:1460 TCP #1835-(1-1947) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:13:43 127.0.0.1:80 Internal&External Global IP.34:1453 TCP #1836-(1-1948) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:14:51 127.0.0.1:80 Internal&External Global IP.34:1691 TCP #1837-(1-1949) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:15:58 127.0.0.1:80 Internal&External Global IP.56:1739 TCP #1838-(1-1950) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:16:45 127.0.0.1:80 Internal&External Global IP.39:1477 TCP #1839-(1-1951) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:16:46 127.0.0.1:80 Internal&External Global IP.34:1618 TCP #1840-(1-1952) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:17:18 127.0.0.1:80 Internal&External Global IP.19:1250 TCP #1841-(1-1953) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:18:19 127.0.0.1:80 Internal&External Global IP.39:1977 TCP #1842-(1-1954) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:18:20 127.0.0.1:80 Internal&External Global IP.19:1056 TCP #1843-(1-1955) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:20:13 127.0.0.1:80 Internal&External Global IP.19:1398 TCP #1844-(1-1956) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:20:17 127.0.0.1:80 Internal&External Global IP.19:1155 TCP #1845-(1-1957) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:20:34 127.0.0.1:80 Internal&External Global IP.22:1736 TCP #1846-(1-1958) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:20:59 127.0.0.1:80 Internal&External Global IP.40:1671 TCP #1847-(1-1959) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:21:14 127.0.0.1:80 Internal&External Global IP.19:1685 TCP #1848-(1-1960) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:21:39 127.0.0.1:80 Internal&External Global IP.22:1651 TCP #1849-(1-1961) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:21:39 127.0.0.1:80 Internal&External Global IP.40:1496 TCP
Current thread:
- 127.0.0.1 Snort Man (Mar 31)
- Re: 127.0.0.1 Edin Dizdarevic (Apr 01)
- SNORT Plugin to block the traffic Zeeshan Ahmed (Apr 01)
- Re: SNORT Plugin to block the traffic Matt Kettler (Apr 01)
- Re: SNORT Plugin to block the traffic Michael Sconzo (Apr 01)
- Re: SNORT Plugin to block the traffic Ravi (Apr 02)
- Re: SNORT Plugin to block the traffic Matt Kettler (Apr 02)
- snortsam trouble bonnie (Apr 27)
- Re: SNORT Plugin to block the traffic Matt Kettler (Apr 01)