diff options
| author | Jonas Smedegaard <dr@jones.dk> | 2002-03-18 22:04:06 +0000 |
|---|---|---|
| committer | Jonas Smedegaard <dr@jones.dk> | 2002-03-18 22:04:06 +0000 |
| commit | 19b2c6c5f3313311ec5cb6c4017a0f338af1a926 (patch) | |
| tree | ecb3998d5a41086e3d3c674a9db20c30a24ec817 /logcheck/ignore.d.server | |
| parent | 3e7293dc60053c7a788f8f617fc504de8a2c0179 (diff) | |
logcheck: Several misc. updates.
Diffstat (limited to 'logcheck/ignore.d.server')
| -rw-r--r-- | logcheck/ignore.d.server/tmp | 26 |
1 files changed, 17 insertions, 9 deletions
diff --git a/logcheck/ignore.d.server/tmp b/logcheck/ignore.d.server/tmp index 8406246..009a3d0 100644 --- a/logcheck/ignore.d.server/tmp +++ b/logcheck/ignore.d.server/tmp @@ -34,17 +34,25 @@ sshd\[.*\]: packet_set_maxsize: setting to 4096 dhcpd-2.2.x: BOOTREQUEST from 00:20:6b:18:20:35 dhcpd-2.2.x: No applicable record for BOOTP host 00:20:6b:18:20:35 postfix.*\[.*\]: .* from=<groove@mailomat.grooveattack.com> -snort: spp_http_decode: IIS Unicode attack detected: -snort: IIS- snort: FrontPage- -snort: spp_portscan: portscan status from -snort: IDS246 - MISC - Large ICMP Packet: -snort: NETBIOS-SMB-C: -snort: NETBIOS-SMB-CD...: -snort: WEB-../..: -snort: spp_portscan: PORTSCAN DETECTED -snort: spp_portscan: End of portscan +snort: IDS015 - RPC - portmap-request-status: snort: IDS029 - SCAN-Possible Queso Fingerprint attempt: +snort: IDS115 - MISC-Traceroute-UDP: +snort: IDS212 - MISC - DNS Zone Transfer: snort: IDS226 - CVE-1999-0172 - CGI-formmail: +snort: IDS246 - MISC - Large ICMP Packet: +snort: IIS- snort: MISC-Attempted Sun RPC high port access: +snort: NETBIOS-SMB-C: +snort: NETBIOS-SMB-CD...: +snort: NMAP TCP ping!: +snort: RPC Info Query: snort: SCAN-SYN FIN: +snort: spp_http_decode: IIS Unicode attack detected: +snort: spp_portscan: End of portscan +snort: spp_portscan: PORTSCAN DETECTED +snort: spp_portscan: portscan status from +snort: WEB-../..: +snort: WEB-CGI-upload.pl: +postgres\[.*\]: \[.*\] DEBUG: +postgres\[.*\]: \[[:digit:]-\] ^ITotal CPU .* sec elapsed .* sec\. |