[Snort-users] unusual log

Alwin Raymundo alrayworld at ...131...
Thu Feb 14 05:45:06 EST 2002


Hi guys,

I need your advice or insight of this. I little mixed
up in here the acid showed that my server doing
illegal activities. because it showed that the source
is my server and going to another server.  

Take note that my server is a linux box not NT/2000.

There are the result of snort and acid.

[url] TFTP GET Admin.dll

Payload

length = 18

000 : 00 01 41 64 6D 69 6E 2E 64 6C 6C 00 6F 63 74 65 
 ..Admin.dll.octet
        
Any advice or help will be appreciated.

Alwin Raymundo

=====
Alwin Raymundo

__________________________________________________
Do You Yahoo!?
Send FREE Valentine eCards with Yahoo! Greetings!
http://greetings.yahoo.com




More information about the Snort-users mailing list