[Snort-users] weird readme.eml attempt

Basil Saragoza snortlst at ...125...
Mon Mar 25 12:09:48 EST 2002

Please take a look at the decoded payload.
I have an mailbox in hotmail-snortlsts at ...5386...
I remmeber I asked a couple of questions regarding readme.eml a month ago
and I have answers regarding that topic in my mailbox. Everytime I fire up
Outlook Express I get the aler in snort in snort regarding the
readme.eml.attempt and according to payload I think it looks at my mailbox
in hotmail and alerts me regarding the mesasage there. How should I relate
to this?

eml attempt</m:subject>
<D:status>HTTP/1.1 200 OK</D:status>
<m:from>Roberto Suarez Soto</m:from>
<m:subject>Re: [Snort-users] WEB-MISC readme.eml attempt</m:subject>

More information about the Snort-users mailing list