[Snort-users] Arghh...how do I stop it doing this!!

Dave Fitches sticks.au at ...375...
Thu May 3 11:40:44 EDT 2001


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



Active System Attack Alerts
=-=-=-=-=-=-=-=-=-=-=-=-=-=
[**] MISC source port 53 to <1023 [**]
05/04-00:04:47.283946 209.235.102.13:53 -> 203.164.xxx.xxx:53
UDP TTL:237 TOS:0x0 ID:50935 IpLen:20 DgmLen:460 DF
[**] MISC source port 53 to <1023 [**]
05/04-00:04:47.542673 209.235.102.12:53 -> 203.164.xxx.xxx:53
UDP TTL:237 TOS:0x0 ID:21123 IpLen:20 DgmLen:137 DF

[...etc...]

Damn thing seems to read every DNS query _I_ do as a bloody alert notable
event!!
ARRGHH!!!

- -

    = Dave Fitches =

________________________________________________________
 ,--__|\    David Fitches
/       \   * ICQ : 2120090   * SATCO CID : 955589
\_,--\__/   * Mobile : +61-419-466-744
       v    * E-mail : sticks.au at ...375...
               Melbourne, Victoria, Australia
               Web: http://www.bigfoot.com/~sticks.au/
_______________________________________________________
Please Note: Unless this e-mail has been sent as PRIVATE, PERSONAL or
CONFIDENTIAL, the receiver may forward copies of it on the condition  that
they send an advisory message to the original sender.
If however the message has been marked PRIVATE, PERSONAL or CONFIDENTIAL
prior consent MUST be obtained before the message can be forwarded.
-----BEGIN PGP SIGNATURE-----
Version: PGP 7.0.1

iQA/AwUBOvF7/AUhkO6Zt2EDEQJ7OQCfZ+icUliohAoa0ngfiVky5NAF56AAoNYS
5HbyjuQ87SEZ+qj/5hDAoCsb
=UK1c
-----END PGP SIGNATURE-----





More information about the Snort-users mailing list