Snort mailing list archives

Re: Confused?


From: Dino Dragovic <dragovic () gfos hr>
Date: Tue, 1 Nov 2005 21:14:42 +0100 (CET)

What is the destination of that traffic? is it 10.1.10.xx/24?

Best regards,

Dino

On Tue, 1 Nov 2005, John Friedman wrote:

Hi all,

Here is my home var HOME_NET [10.1.10.0/24]
I span the firewall port to the snort box monitoring port.  I got a lot of traffic from other VLAN such as 
10.1.14.0/24, 10.1.44.0/24...10.1.77.0/24...

I feel a liittle bit confused why some alerts from 10.1.14.0/24 and not just from 10.1.10.0/24?

Am I lost?

Thanks,

John


---------------------------------
Yahoo! FareChase - Search multiple travel sites in one click.


-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: