[Snort-users] SQUID scan proxy attempt

Fabio Viero fviero at ...9913...
Tue Feb 24 06:59:28 EST 2004


I'm new to snort and i had setup a very simple test configuration. In short, i run squid on (and apache, snort with acid and so on...) and i have a win98( client that access the internet via this proxy server ( Snort is detecting this access (from to as a "SCAN squid proxy attempt". We know it's not what's really happening. The server has no firewall rules. The only access control is done with squid.

Could anyone give an insight about this problem?

Thanks in advance to anyone of you.

"A day without Linux is day
without learning."

More information about the Snort-users mailing list