From: Chan, Wilson (wchanhonolulu.gov)
Date: Tue Nov 10 2009 - 14:11:44 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Anyone have any ideas why Snort is trigger this CLSID rule on google ip
ranges?

==Snort Event==

http://pastebin.ca/1665359 <http://pastebin.ca/1665359>

http://cve.mitre.org/cgi-bin/cvename.cgi?name=2004-0420

http://www.snortid.com/snortid.asp?QueryID=1:2589

These 5 ips owned by google is triggering this alert.

66.102.7.99

72.14.213.91

72.14.213.93

72.14.213.136

72.14.213.190

OrgName: Google Inc.

NetRange: 72.14.192.0 - 72.14.255.255

CIDR: 72.14.192.0/18

NetRange: 66.102.0.0 - 66.102.15.255

CIDR: 66.102.0.0/20

NetName: GOOGLE

Wilson

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july

_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]