Snort mailing list archives
127.0.0.1
From: "Snort Man" <aa () magic net pk>
Date: Wed, 31 Mar 2004 11:23:01 +0500
Dear All
I am new to this snort thing. I installed snort and 70% of the traffice is as follows.. loopback address port 80 is
sending requests to internal and external addresses.
can anybody please explaing what is this ??
ID < Signature > < Timestamp > < Source
Address > < Dest.
Address > < Layer 4
Proto >
#1822-(1-1932) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:06:21
127.0.0.1:80 Internal&External Global IP.40:1519 TCP
#1823-(1-1933) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:06:55
127.0.0.1:80 Internal&External Global IP.40:1193 TCP
#1824-(1-1936) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:07:42
127.0.0.1:80 Internal&External Global IP.19:1976 TCP
#1825-(1-1937) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:08:07
127.0.0.1:80 Internal&External Global IP.127:1766 TCP
#1826-(1-1938) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:08:14
127.0.0.1:80 Internal&External Global IP.40:1924 TCP
#1827-(1-1939) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:08:22
127.0.0.1:80 Internal&External Global IP.127:1766 TCP
#1828-(1-1940) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:09:03
127.0.0.1:80 Internal&External Global IP.19:1883 TCP
#1829-(1-1941) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:09:28
127.0.0.1:80 Internal&External Global IP.40:1124 TCP
#1830-(1-1942) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:09:38
127.0.0.1:80 Internal&External Global IP.40:1183 TCP
#1831-(1-1943) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:10:44
127.0.0.1:80 Internal&External Global IP.40:1801 TCP
#1832-(1-1944) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:11:33
127.0.0.1:80 Internal&External Global IP.127:1143 TCP
#1833-(1-1945) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:12:44
127.0.0.1:80 Internal&External Global IP.40:1738 TCP
#1834-(1-1946) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:13:08
127.0.0.1:80 Internal&External Global IP.34:1460 TCP
#1835-(1-1947) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:13:43
127.0.0.1:80 Internal&External Global IP.34:1453 TCP
#1836-(1-1948) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:14:51
127.0.0.1:80 Internal&External Global IP.34:1691 TCP
#1837-(1-1949) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:15:58
127.0.0.1:80 Internal&External Global IP.56:1739 TCP
#1838-(1-1950) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:16:45
127.0.0.1:80 Internal&External Global IP.39:1477 TCP
#1839-(1-1951) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:16:46
127.0.0.1:80 Internal&External Global IP.34:1618 TCP
#1840-(1-1952) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:17:18
127.0.0.1:80 Internal&External Global IP.19:1250 TCP
#1841-(1-1953) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:18:19
127.0.0.1:80 Internal&External Global IP.39:1977 TCP
#1842-(1-1954) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:18:20
127.0.0.1:80 Internal&External Global IP.19:1056 TCP
#1843-(1-1955) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:20:13
127.0.0.1:80 Internal&External Global IP.19:1398 TCP
#1844-(1-1956) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:20:17
127.0.0.1:80 Internal&External Global IP.19:1155 TCP
#1845-(1-1957) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:20:34
127.0.0.1:80 Internal&External Global IP.22:1736 TCP
#1846-(1-1958) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:20:59
127.0.0.1:80 Internal&External Global IP.40:1671 TCP
#1847-(1-1959) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:21:14
127.0.0.1:80 Internal&External Global IP.19:1685 TCP
#1848-(1-1960) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:21:39
127.0.0.1:80 Internal&External Global IP.22:1651 TCP
#1849-(1-1961) url[snort] BAD-TRAFFIC loopback traffic 2004-03-18 22:21:39
127.0.0.1:80 Internal&External Global IP.40:1496 TCP
Current thread:
- 127.0.0.1 Snort Man (Mar 30)
