[Snort-users] output analysis

RAMALINGA Reddy Rgreddy1 at ...4101...
Wed Nov 21 20:15:02 EST 2001


Hello Gurus,
	The following is the formatted output of snort tool.

Hits	Source		Destination	details
------	---------------	---------------------	----------
9	A		B		portscan unique ports
58	A				portscan unique ip
26	A		C		WEB-MISC long basic authorization
string
169	A		B		ICMP L3retriever Ping
56	A		B		ICMP PING NMAP
22	A		B		MISC Large ICMP Packet

	what can I infer from this ? 
	Is ICMP L3retriever Ping dangerous ? 
	How is WEB-MISC 403 Forbidden dangerous ?

Please help.
Rali




More information about the Snort-users mailing list