DNS servers!!

From: Franky (fcebamanos@guest-mail.com)
Date: Wed May 02 2001 - 19:22:02 PDT

Next message: Paul Rogers: "Re: What "methods" are being used"

Previous message: Mike Blomgren: "SV: bizzare NULL scan"
Next in thread: McCammon, Keith: "Re: DNS servers!!"
Reply: McCammon, Keith: "Re: DNS servers!!"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Any idea what would generate the following alerts[**]
IDS28/probe-nmap_tcp_ping [**]
02/09-09:19:12.942288 0:B0:4A:9B:D0:38 -> 8:0:20:C2:1A:58 type:0x800
len:0x3C
194.133.58.129:80 -> a.b.c.42:53 TCP TTL:51 TOS:0x0 ID:13740 IpLen:20
DgmLen:40
***A**** Seq: 0x1BF Ack: 0x0 Win: 0x578 TcpLen: 20
[**] IDS7/SourcePortTraffic-53-tcp [**]
02/09-09:19:12.942337 0:B0:4A:9B:D0:38 -> 8:0:20:C2:1A:58 type:0x800
len:0x3C
194.133.58.129:53 -> a.b.c.42:53 TCP TTL:51 TOS:0x0 ID:13741 IpLen:20
DgmLen:40
******S* Seq: 0x6ACADDF Ack: 0x0 Win: 0x578 TcpLen: 20

Next message: Paul Rogers: "Re: What "methods" are being used"
Previous message: Mike Blomgren: "SV: bizzare NULL scan"
Next in thread: McCammon, Keith: "Re: DNS servers!!"
Reply: McCammon, Keith: "Re: DNS servers!!"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Thu May 03 2001 - 14:38:03 PDT