[Snort-sigs] MISC Tiny Fragments

Noller, Gregory Noller2G at ...256...
Tue Jan 15 14:05:01 EST 2002


Every 40 minutes, three packets from 211.13.231.126. Like clock work.

src and dst ports unknown, type is listed as ???

Firewall Logs shows no connections, no denials.

packet payload:

08 00 C6 11 4D 0C 01 00                           ....M...
08 00 93 11 4D 0C 02 00                           ....M...
08 00 7C 11 4D 0C 03 00                           ..|.M...

08 00 C2 85 32 0C 02 00                           ....2...
08 00 F3 85 32 0C 01 00                           ....2...
08 00 AA 85 32 0C 03 00                           ....2...


Gregory Noller
Senior IT Security Technologist
Technology Risk Services
Koch Business Solutions, LP
Wichita, Kansas
(316) 828-7725






More information about the Snort-sigs mailing list