Snort mailing list archives
STEALTH ACTIVITY (unknown) detection
From: "IntegPatchMgr" <IntegPatchMgr () infosys com>
Date: Mon, 28 Jul 2003 16:45:34 +0530
Hi,
Can any one let me know what below alert means ??
EVENT # : 531
EVENTLOG : Application
EVENT TYPE : INFORMATION (4)
SOURCE : snort
EVENT ID : 1
TIME : 7/28/2003 3:06:08 PM
MESSAGE : [111:1:1] (spp_stream4) STEALTH ACTIVITY (unknown)
detection {TCP} 192.168.230.148:1570 -> 192.168.200.100:80
Current thread:
- STEALTH ACTIVITY (unknown) detection IntegPatchMgr (Jul 28)
- Re: STEALTH ACTIVITY (unknown) detection cc (Jul 30)
- Re: STEALTH ACTIVITY (unknown) detection Chris Green (Jul 31)
- Message not available
- Re: STEALTH ACTIVITY (unknown) detection cc (Jul 31)
- Re: STEALTH ACTIVITY (unknown) detection cc (Jul 30)
