Snort mailing list archives
BAD-TRAFFIC same SRC/DST
From: "Dan Horne" <dan () taisweb net>
Date: Mon, 22 Nov 2004 09:26:57 -0500
I just got snort/acid set up on my Win2K server, and I let it run for about a week. I am seeing thousands of these "BAD-TRAFFIC same SRC/DST" coming from a single server on ports 67, 68 and 138. It is a Win2K Domain controller, as well as an RIS server. I am at a loss to explain this activity. Can anyone help? Dan Horne Web Services Administrator TAIS Web ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://productguide.itmanagersjournal.com/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- BAD-TRAFFIC same SRC/DST Dan Horne (Nov 22)