Re: Bleeding-Edge Virus 2001268 false positive (SWEN.A)

[Xavier Cabrera <xavierc () devilcrack org>]

Hello :

Anyone know what this logs means?

Thanks
Xavier.

Jul  5 20:09:36 spark snort: IP Len field is 8 bytes smaller than 
captured length.     (ip.len: 96, cap.len: 104)
Jul  5 20:09:36 spark snort: IP Len field is 8 bytes smaller than 
captured length.     (ip.len: 96, cap.len: 104)
Jul  5 20:09:36 spark snort: IP Len field is 6 bytes smaller than 
captured length.     (ip.len: 40, cap.len: 46)
Jul  5 20:09:36 spark snort: IP Len field is 6 bytes smaller than 
captured length.     (ip.len: 40, cap.len: 46)
Jul  5 20:09:36 spark snort: IP Len field is 8 bytes smaller than 
captured length.     (ip.len: 112, cap.len: 120)
Jul  5 20:09:36 spark snort: IP Len field is 6 bytes smaller than 
captured length.     (ip.len: 40, cap.len: 46)
Jul  5 20:09:37 spark last message repeated 38 times
Jul  5 20:09:37 spark snort: IP Len field is 8 bytes smaller than 
captured length.     (ip.len: 96, cap.len: 104)
Jul  5 20:09:37 spark snort: IP Len field is 6 bytes smaller than 
captured length.     (ip.len: 40, cap.len: 46)
Jul  5 20:09:37 spark last message repeated 20 times
Jul  5 20:09:37 spark snort: IP Len field is 8 bytes smaller than 
captured length.     (ip.len: 112, cap.len: 120)
Jul  5 20:09:37 spark snort: IP Len field is 6 bytes smaller than 
captured length.     (ip.len: 40, cap.len: 46)
Jul  5 20:09:38 spark last message repeated 33 times
Jul  5 20:09:38 spark snort: IP Len field is 8 bytes smaller than 
captured length.     (ip.len: 96, cap.len: 104)
Jul  5 20:09:38 spark snort: IP Len field is 8 bytes smaller than 
captured length.     (ip.len: 96, cap.len: 104)
Jul  5 20:09:38 spark snort: IP Len field is 6 bytes smaller than 
captured length.     (ip.len: 40, cap.len: 46)
Jul  5 20:09:38 spark last message repeated 8 times
Jul  5 20:09:38 spark snort: IP Len field is 8 bytes smaller than 
captured length.     (ip.len: 112, cap.len: 120)
Jul  5 20:09:38 spark snort: IP Len field is 6 bytes smaller than 
captured length.     (ip.len: 40, cap.len: 46)
Jul  5 20:09:38 spark last message repeated 6 times
Jul  5 20:09:39 spark snort: IP Len field is 17 bytes smaller than 
captured length.     (ip.len: 29, cap.len: 46)
Jul  5 20:09:39 spark snort: IP Len field is 6 bytes smaller than 
captured length.     (ip.len: 40, cap.len: 46)



-------------------------------------------------------
SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
from IBM. Find simple to follow Roadmaps, straightforward articles,
informative Webcasts and more! Get everything you need to get up to
speed, fast. http://ads.osdn.com/?ad_id=7477&alloc_id=16492&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users