[Snort-users] ATTACK-RESPONSES id check returned userid
rosc at ...9480...
Tue Jun 17 02:30:22 EDT 2003
When we connect to one specific website, www.marca.com, I get a lot of
The source adress is my NAT'ed address and the destination is the IP of
Can somebody please explain why I get this as an alert.
ID = #0-(1-355)
SIGNATURE = ATTACK-RESPONSES id check returned userid
TIMESTAMP = 2003-06-17 09:30:34
SOURCE IP = $MY_NAT_IP:57967
DEST IP = 220.127.116.11:80
LAYER 4 PROTO = TCP
More information about the Snort-users