[Snort-users] HELP Port 1080 only

DThomaz at ...6151... DThomaz at ...6151...
Thu Jun 20 15:48:03 EDT 2002


I just got my snort to work.
Now, my issue is that the only port that the ACID is displaying alerts is
on port 1080

#0-(1-1)        [url] SCAN Proxy attempt        2002-06-20 15:01:03
10.10.16.95:2882        10.10.16.90:1080        TCP
            #1-(1-2)        [url] SCAN Proxy attempt        2002-06-20
15:46:45        10.10.16.95:2595        10.10.16.90:1080        TCP
            #2-(1-3)        [url] SCAN Proxy attempt        2002-06-20
15:51:23        10.10.16.95:3307        10.10.16.90:1080        TCP
            #3-(1-4)        [url] SCAN Proxy attempt        2002-06-20
15:51:28        10.10.16.95:3314        10.10.16.90:1080        TCP
            #4-(1-5)        [url] SCAN Proxy attempt        2002-06-20
15:51:30        10.10.16.95:3321        10.10.16.90:1080        TCP
            #5-(1-6)        [url] SCAN Proxy attempt        2002-06-20
16:09:11        10.10.16.95:3662        10.10.16.90:1080        TCP
            #6-(1-7)        [url] SCAN Proxy attempt        2002-06-20
16:09:14        10.10.16.95:3667        10.10.16.90:1080        TCP
            #7-(1-8)        [url] SCAN Proxy attempt        2002-06-20
16:09:16        10.10.16.95:3673        10.10.16.90:1080        TCP
            #8-(1-9)        [url] SCAN Proxy attempt        2002-06-20
16:24:27        10.10.16.95:4029        10.10.16.90:1080        TCP

Can someone help?

Thanks!





More information about the Snort-users mailing list