Snort mailing list archives

unusual log


From: Alwin Raymundo <alrayworld () yahoo com>
Date: Thu, 14 Feb 2002 05:44:51 -0800 (PST)

Hi guys,

I need your advice or insight of this. I little mixed
up in here the acid showed that my server doing
illegal activities. because it showed that the source
is my server and going to another server.  

Take note that my server is a linux box not NT/2000.

There are the result of snort and acid.

[url] TFTP GET Admin.dll

Payload

length = 18

000 : 00 01 41 64 6D 69 6E 2E 64 6C 6C 00 6F 63 74 65 
 ..Admin.dll.octet
        
Any advice or help will be appreciated.

Alwin Raymundo

=====
Alwin Raymundo

__________________________________________________
Do You Yahoo!?
Send FREE Valentine eCards with Yahoo! Greetings!
http://greetings.yahoo.com

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: