[Snort-users] attacks

Joerg Weber j.weber at ...8292...
Mon Sep 15 07:01:04 EDT 2003


Hi,
> Hi,
> In my acid GUI i can see attacks from:
> Http://199.107.65.177 with SID:498
> 
> And if i put that ip number in my browser i get on the snort site!
Have a look at the rule and see what it does.
And I dare to bet that this mail will trigger your snort as well, as it
contains the string uid=0(root) as well :)

Cheers!

Joerg

-- 
Joerg Weber
Network Security

infoServe GmbH
Nell-Breuning-Allee 6
D-66115 Saarbruecken

T: (0681) 8 80 08 - 0
F: (0681) 8 80 08 - 33
www.infos.de
E: j.weber at ...8292...
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20030915/a305c2ea/attachment.sig>


More information about the Snort-users mailing list