What does this SNORT mean?

Hanasaki JiJi hanasaki at hanaden.com
Wed Sep 25 04:21:03 CDT 2002


[**] [1:542:2] INFO Possible IRC Access [**]
[Classification: Not Suspicious Traffic] [Priority: 3]
09/23-18:55:03.570539 65.26.127.29:1805 -> 66.28.140.58:6669
TCP TTL:64 TOS:0x0 ID:48392 IpLen:20 DgmLen:97 DF
***AP*** Seq: 0xA02BE993  Ack: 0x27CE056  Win: 0x16D0  TcpLen: 32
TCP Options (3) => NOP NOP TS: 225006747 16743823

Thank you.




More information about the Kclug mailing list