[logs] Netscreen logs

Previous message: Christina Noren: "[logs] Re: regex-less parsing of messages"
Next in thread: Karl Lovink: "[logs] Re: Netscreen logs"
Reply: Karl Lovink: "[logs] Re: Netscreen logs"
Reply: Nico Baggus: "[logs] Re: Netscreen logs"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

ludaohong@private

Found these logs from a netscreen firewall seems malicious, somebody seen these:

1:Nov 30 18:01:53 xx.xx.xx.xx ns204: NetScreen device_id=ns204 
[Root]system-critical-00027: 2nd push has been confirmed. (2005-11-30
17:56:44)

2:Nov 30 18:01:59 xx.xx.xx.xx  ns204: NetScreen device_id=ns204 
[Root]system-critical-00027: Configuration Erase sequence accepted,
unit reset.   (2005-11-30 17:56:50)

3:Nov 30 18:01:59 xx.xx.xx.xx  ns204: NetScreen device_id=ns204 
[Root]system-notification-00033: NSM keys were deleted. (2005-11-30
17:56:50)

Thanks in advance!

--
Lu Daohong
_______________________________________________
LogAnalysis mailing list
LogAnalysis@private
http://lists.shmoo.com/mailman/listinfo/loganalysis