Home page logo
/

snort logo Snort mailing list archives

Confusion on Protocol Mismatch
From: "Lay, James" <james.lay () wincofoods com>
Date: Fri, 10 Dec 2010 08:21:56 -0700

Team,

 

So...I'm confused on just where this is a protocol mismatch:

 

12/10-08:16:10.632806  [**] [128:4:1] (spp_ssh) Protocol mismatch [**]
[Priority: 3] {TCP} 10.21.10.101:1180 -> 10.21.10.2:22

 

Relevant conf entries:

 

var SSH_SERVERS [10.21.0.9,10.21.10.2,10.21.10.8]

portvar SSH_PORTS 22 

 

Thanks/Danke/Gracias

 

James Lay

IT Security Analyst

WinCo Foods

208-672-2014 Office

208-559-1855 Cell

650 N Armstrong Pl.

Boise, Idaho 83704

 

<<winmail.dat>>

------------------------------------------------------------------------------
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]