[Snort-users] snort alert

Vladimir Potapov mailarchives at ...1975...
Tue Sep 16 06:46:01 EDT 2003


Hello!!!
In snort alert I see this lines :

[**] SCAN UPNP service discover attempt [**]
09/15-16:39:10.579722 172.19.1.79:1198 -> 239.255.255.250:1900
UDP TTL:4 TOS:0x0 ID:16768 IpLen:20 DgmLen:161
Len: 133

What they mean and where I can read about it?
Thank for any help.




More information about the Snort-users mailing list