Snort mailing list archives
unusual log
From: Alwin Raymundo <alrayworld () yahoo com>
Date: Thu, 14 Feb 2002 05:44:51 -0800 (PST)
Hi guys,
I need your advice or insight of this. I little mixed
up in here the acid showed that my server doing
illegal activities. because it showed that the source
is my server and going to another server.
Take note that my server is a linux box not NT/2000.
There are the result of snort and acid.
[url] TFTP GET Admin.dll
Payload
length = 18
000 : 00 01 41 64 6D 69 6E 2E 64 6C 6C 00 6F 63 74 65
..Admin.dll.octet
Any advice or help will be appreciated.
Alwin Raymundo
=====
Alwin Raymundo
__________________________________________________
Do You Yahoo!?
Send FREE Valentine eCards with Yahoo! Greetings!
http://greetings.yahoo.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- unusual log Alwin Raymundo (Feb 14)
