Confusion on Protocol Mismatch

["Lay, James" <james.lay () wincofoods com>]

Team,

 

So...I'm confused on just where this is a protocol mismatch:

 

12/10-08:16:10.632806  [**] [128:4:1] (spp_ssh) Protocol mismatch [**]
[Priority: 3] {TCP} 10.21.10.101:1180 -> 10.21.10.2:22

 

Relevant conf entries:

 

var SSH_SERVERS [10.21.0.9,10.21.10.2,10.21.10.8]

portvar SSH_PORTS 22 

 

Thanks/Danke/Gracias

 

James Lay

IT Security Analyst

WinCo Foods

208-672-2014 Office

208-559-1855 Cell

650 N Armstrong Pl.

Boise, Idaho 83704

<<winmail.dat>>

------------------------------------------------------------------------------

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users