Snort mailing list archives
HELP Port 1080 only
From: DThomaz () flowserve com
Date: Thu, 20 Jun 2002 16:47:36 -0600
I just got my snort to work.
Now, my issue is that the only port that the ACID is displaying alerts is
on port 1080
#0-(1-1) [url] SCAN Proxy attempt 2002-06-20 15:01:03
10.10.16.95:2882 10.10.16.90:1080 TCP
#1-(1-2) [url] SCAN Proxy attempt 2002-06-20
15:46:45 10.10.16.95:2595 10.10.16.90:1080 TCP
#2-(1-3) [url] SCAN Proxy attempt 2002-06-20
15:51:23 10.10.16.95:3307 10.10.16.90:1080 TCP
#3-(1-4) [url] SCAN Proxy attempt 2002-06-20
15:51:28 10.10.16.95:3314 10.10.16.90:1080 TCP
#4-(1-5) [url] SCAN Proxy attempt 2002-06-20
15:51:30 10.10.16.95:3321 10.10.16.90:1080 TCP
#5-(1-6) [url] SCAN Proxy attempt 2002-06-20
16:09:11 10.10.16.95:3662 10.10.16.90:1080 TCP
#6-(1-7) [url] SCAN Proxy attempt 2002-06-20
16:09:14 10.10.16.95:3667 10.10.16.90:1080 TCP
#7-(1-8) [url] SCAN Proxy attempt 2002-06-20
16:09:16 10.10.16.95:3673 10.10.16.90:1080 TCP
#8-(1-9) [url] SCAN Proxy attempt 2002-06-20
16:24:27 10.10.16.95:4029 10.10.16.90:1080 TCP
Can someone help?
Thanks!
-------------------------------------------------------
Sponsored by:
ThinkGeek at http://www.ThinkGeek.com/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- HELP Port 1080 only DThomaz (Jun 20)
