From: Warner Joseph (Joseph.Warnersiemens.com)
Date: Thu Jan 22 2004 - 15:32:26 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hi,

I'm using snort-2.1.0 and I just noticed something..

..I used to be able to do some alert testing by pointing
a web browser to my server running snort ala
http://myserver/htdocs/scripts/..%5c%5c../winnt/system32/cmd.exe
and it would generate WEB-IIS cmd.exe access or similar alerts.

I also tried http://myserver/msadcs.dll

When I do it now, no alerts are generated. Also, no alerts
are generated when I point my browser to any of our other
servers.

Does anyone know why this isn't triggering alerts?

Thanks

Joe

-------------------------------------------------------------------------------
This message and any included attachments are from Siemens Medical Solutions
USA, Inc. and are intended only for the addressee(s).
The information contained herein may include trade secrets or privileged or
otherwise confidential information. Unauthorized review, forwarding, printing,
copying, distributing, or using such information is strictly prohibited and may
be unlawful. If you received this message in error, or have reason to believe
you are not authorized to receive it, please promptly delete this message and
notify the sender by e-mail with a copy to Central.SecurityOfficeshs.siemens.com

Thank you

-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]