[Snort-users] Is this anything to worry about?

Jim Starke jstarke at ...136...
Sat Sep 22 11:23:02 EDT 2001


This is the first time that I've seen this signature.

Thanks in advance.

Generated by ACID v0.9.6b13 on Sat September 22, 2001 14:16:50

------------------------------------------------------------------------------
#(1 - 12984) [2001-09-22 13:55:00] [arachNIDS/126]  X11 outgoing
IPv4: 207.13.118.235 -> aaa.bbb.ccc.ddd
      hlen=5 TOS=0 dlen=48 ID=540 flags=0 offset=0 TTL=117 chksum=36491
TCP:  port=6000 -> dport: 1081  flags=***A**S* seq=98557784
      ack=192327 off=7 res=0 win=8760 urp=0 chksum=65319
      Options:
       #1 - MSS len=4 data=0218
       #2 - NOP len=0
       #3 - NOP len=0
       #4 - SACKOK len=0
Payload: none
------------------------------------------------------------------------------
#(1 - 13074) [2001-09-22 14:09:50] [arachNIDS/126]  X11 outgoing
IPv4: 137.99.161.152 -> aaa.bbb.ccc.ddd
      hlen=5 TOS=0 dlen=48 ID=49226 flags=0 offset=0 TTL=116 chksum=60505
TCP:  port=6000 -> dport: 1191  flags=***A**S* seq=3905664177
      ack=1083242 off=7 res=0 win=1460 urp=0 chksum=57896
      Options:
       #1 - MSS len=4 data=05B4
       #2 - NOP len=0
       #3 - NOP len=0
       #4 - SACKOK len=0
Payload: none



-- 
Quidquid latine dictum sit, altum viditur.
http://www.jcsmall.com/homepage






More information about the Snort-users mailing list