[Snort-users] bind attack or what ?

Togan Muftuoglu toganm at ...603...
Mon Apr 30 08:20:04 EDT 2001


Hi everyone this is what snort captured I understand the first what is which version of bind I am running the second one is what trying the alphabet or ?

06:03:56.492900 203.149.249.94.newoak > 212.156.196.161.domain: 28141 TXT CHAOS)? version.bind. (30)
06:03:57.422900 203.149.249.94.newoak > 212.156.196.161.domain: 28141 inv_q+ [b2&3=0x980] A? AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA.BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB.CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC.^@^A^B^C^D^E^F^G^H^I^J^K^L^M^N^O^P^Q^R^S^T^U^V^W^X^Y^Z^[^\^]^^^_ !"#$%&'()*+,-./0123456789:;<=.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE.FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF.GGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG. (465)
-- 
Togan Muftuoglu





More information about the Snort-users mailing list