Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:




firewall-wizards logo Firewall Wizards mailing list archives

Re: Is it "fishy"?
From: Bill_Royds () pch gc ca
Date: Tue, 4 Dec 2001 18:14:08 -0500




This may mean that he/she is using a streaming video player or alive
update type application with Java.
Check for actual file names and MIME types to confirm.


Bill Royds
System Administrator, CHIN
ph: (819) 994-1200 X 239





"C. K. Lung" <clung () hotmail com>
12/04/01 02:54 PM


        To:     "Firewall-Wizards () Nfr  Net" <firewall-wizards () nfr net>
        cc:
        Subject:        [fw-wiz] Is it "fishy"?


The firewall log shows that a host (YMCA12) has been using http accessing
a
web site over 2 hours.  Is it a form of "attack" or it is normal.  The
time
is between 10:15 am till 12:30 pm.

Any comments are much appreciated.

Thanks,

clung

_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards




_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]