[Snort-devel] ZOPE & snOrt 1.8.4

Enrique Olivares e.olivares at ...1259...
Fri Apr 12 05:44:11 EDT 2002


Hi,

This is my first contact with you. Thanks for snOrt. Great, really great.

I got this message:

[**] [1:620:1] SCAN Proxy attempt [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/08-15:27:55.972826 10.12.1.246:4828 -> 10.12.122.249:8080
TCP TTL:63 TOS:0x0 ID:40439 IpLen:20 DgmLen:60 DF
******S* Seq: 0xC44F4221  Ack: 0x0  Win: 0x7D78  TcpLen: 40
TCP Options (5) => MSS: 1460 SackOK TS: 324132474 0 NOP WS: 0

ZOPE use 8080 to work, but nothing more else.

ThankX

Enrique Olivares 
e.olivares at ...1259...




More information about the Snort-devel mailing list