Snort mailing list archives

RE: mrtg machine


From: "Slighter, Tim" <tslighter () itc nrcs usda gov>
Date: Mon, 21 Apr 2003 08:05:07 -0600

just rewrite the rule as:  

alert udp !10.1.1.x any -> $HOME_NET 162 (msg:"SNMP trap udp".......

-----Original Message-----
From: Ben Whittaker [mailto:ben_whittaker () yahoo com]
Sent: Sunday, April 20, 2003 1:00 PM
To: snort-users () lists sourceforge net
Subject: [Snort-users] mrtg machine


snort: [1:1417:2] SNMP request udp [Classification: Attempted Information
Leak] [Priority: 2]: {UDP} 10.1.1.x:39629 -> x.x..x.x:161

This is my machine running MRTG how do I stop it from logging.




  _____  

Do you Yahoo!?
The New  <http://us.rd.yahoo.com/search/mailsig/*http://search.yahoo.com>
Yahoo! Search - Faster. Easier. Bingo.


Current thread: