[Snort-users] New log output?

Martin Roesch roesch at ...1935...
Thu Mar 14 11:12:34 EST 2002


Oops, I left a debug statement turned on in the RPC preprocessor.  I'll fix
that... :)

     -Marty

On 3/14/02 1:14 PM, "Vjay LaRosa" <vjayl at ...3331...> wrote:

> Hello,
> 
> Just upgraded to Snort 1.8.4-Beta4 libpcap 0.7.1 last night. I noticed
> this morning that my log output from snort has lots of these messages
> in it now that I have never seen before. Does anyone now what is causing
> them?
> 
> Thanks!
> 
> vjl
> 
> converted data:
> 80 00 00 38 8C 2D 47 E9 00 00 00 00 00 00 00 02  ...8.-G.........
> 00 01 86 A0 00 00 00 02 00 00 00 03 00 00 00 00  ................
> 00 00 00 00 00 00 00 00 00 00 00 00 13 AB 66 80  ..............f.
> 00 00 00 01 00 00 00 06 00 00 00 00              ............
> 
> New size: 60
> converted data:
> 80 00 00 38 8C 2D 47 E9 00 00 00 00 00 00 00 02  ...8.-G.........
> 00 01 86 A0 00 00 00 02 00 00 00 03 00 00 00 00  ................
> 00 00 00 00 00 00 00 00 00 00 00 00 13 AB 66 80  ..............f.
> 00 00 00 01 00 00 00 06 00 00 00 00              ............
> 
> New size: 60
> converted data:
> 80 00 00 38 CB D3 8A 88 00 00 00 00 00 00 00 02  ...8............
> 00 01 86 A0 00 00 00 02 00 00 00 03 00 00 00 00  ................
> 00 00 00 00 00 00 00 00 00 00 00 00 13 AB 66 80  ..............f.
> 00 00 00 01 00 00 00 06 00 00 00 00              ............
> 
> New size: 60
> converted data:
> 80 00 00 38 CB D3 8A 88 00 00 00 00 00 00 00 02  ...8............
> 00 01 86 A0 00 00 00 02 00 00 00 03 00 00 00 00  ................
> 00 00 00 00 00 00 00 00 00 00 00 00 13 AB 66 80  ..............f.
> 00 00 00 01 00 00 00 06 00 00 00 00              ............
> 
> 
> --
> V.Jay LaRosa                           EMC Corporation
> Systems Administrator                  171 South Street
> (508)435-1000 ext 14957                Hopkinton, MA 01748
> (508)497-8082 fax                      www.emc.com
> 
> 
> 
> 
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
> 

-- 
Martin Roesch - Founder/CEO, Sourcefire Inc. - (410)290-1616
Sourcefire: Professional Snort Sensor and Management Console appliances
roesch at ...1935... - http://www.sourcefire.com
Snort: Open Source Network IDS - http://www.snort.org





More information about the Snort-users mailing list