[Snort-users] Anyone Else seen this weird traffic from aol?

Ralf Hildebrandt Ralf.Hildebrandt at ...22...
Mon Aug 14 03:14:03 EDT 2000


On Fre, Aug 11, 2000 at 03:20:55 -0500, Thayne wrote:

> Ever since we've been running snort, we are constantly getting weird stealth
> packets from aol that are picked up by the spp_portscan plugin.  The
> following is an excerpt from one instance:

snip.
 
> They come from different AOL IP's and go to many different IP's on our net.
> We've tried to talk to AOL about it, but they just say it's normal traffic.
> Yeah right.

I've seen this stuff, too. Yes, also from AOL.

-- 
ralf.hildebrandt at ...22...
Dipl.-Informatiker                                       innominate AG
system engineer                                      networking people
tel: +49.30.308806-62  fax: -77   http://innominate.de  pgp at request
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 351 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20000814/00b5123b/attachment.sig>


More information about the Snort-users mailing list