Snort mailing list archives
Re: (no subject)
From: Rich Adamson <radamson () routers com>
Date: Fri, 31 May 2002 13:25:35 -0600
There are a lot of ISPs (including Sprint) that do not filter the non-routable addresses at every router. In some cases, these addresses can carry on a full session. The default condition for most routers is to allow the routing. In your case, you might try tracerouting to it (assuming you are not using those same addresses).
Snort LAN sensor Here is the line from acid : Source destination DOS MSDTC attempt 207.35.159.36:80 10.0.0.249:3372 TCP How is this possible? 10.0.0.249 is a proxy machine taht doesn't have public ip. How somebody can connect to non-routable ip from the outside world? Or should I interpret this line as something else?
_______________________________________________________________ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- RE: Syslog Coughs?, (continued)
- RE: Syslog Coughs? Erek Adams (Apr 15)
- (no subject) C Boss (Apr 25)
- Re: (no subject) Ralf Hildebrandt (Apr 25)
- (no subject) Zero Dark (May 04)
- Re: (no subject) Matt Kettler (May 04)
- (no subject) Vadim Pushkin (May 07)
- (no subject) Z . Qili (May 07)
- (no subject) John Maestrale (May 20)
- (no subject) John Maestrale (May 29)
- (no subject) Hugo Ferr (May 31)
- Re: (no subject) Rich Adamson (May 31)
- RE: (no subject) John Stroud (May 31)
- RE: (no subject) Wirth, Jeff (May 31)
- Re: (no subject) Hugo Ferr (May 31)
- (no subject) Eduard San Anselmo (Jun 04)
- RE: (no subject) McCammon, Keith (Jun 04)
- FW: (no subject) ChandlerH (Jun 04)
- RE: (no subject) Richard Silver (Jun 04)
- (no subject) john (Jun 11)
- (no subject) Richard Houston (Jun 12)
- Re: (no subject) Erek Adams (Jun 12)