SnortSnarf alert page

Source: 192.168.24.52: #301-400

SnortSnarf v021111.1

Signature section (16810)

Top 20 source IPs

Top 20 dest IPs

Looking using input module SnortFileInput, with sources:

/var/log/snort/alert

Earliest: 22:58:44.359638 on 05/04/2010
Latest: 21:48:27.267815 on 05/19/2010

6 different signatures are present for 192.168.24.52 as a source

1 instances of (snort_decoder) WARNING: TCP Data Offset is less than 5!
4 instances of (http_inspect) DOUBLE DECODING ATTACK
12 instances of (http_inspect) OVERSIZE CHUNK ENCODING
32 instances of (http_inspect) OVERSIZE REQUEST-URI DIRECTORY
326 instances of (http_inspect) BARE BYTE UNICODE ENCODING
328 instances of (http_inspect) IIS UNICODE CODEPOINT ENCODING

There are 1 distinct destination IPs in the alerts of the type on this page.

192.168.24.52 Whois lookup at: ARIN RIPE APNIC Geektools

DNS lookup at: Amenesi TRIUMF Princeton

More lookup links: Dshield Sam Spade

Go to: previous range, next range, all alerts, overview page

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/04-22:58:44.359638 192.168.24.52:1150 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:7390 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x94D4E95D  Ack: 0xBEA8B564  Win: 0xFFFF  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/04-22:59:14.053136 192.168.24.52:1151 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:7608 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x90C6AADB  Ack: 0xC0384876  Win: 0xFFFF  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/04-22:59:54.852546 192.168.24.52:1152 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:7738 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x75D04A62  Ack: 0xC3146D6A  Win: 0xFFFF  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/04-23:00:16.749941 192.168.24.52:1152 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:7768 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x75D063E3  Ack: 0xC314D5E0  Win: 0xFFFA  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/04-23:01:04.261208 192.168.24.52:1154 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1915
***AP*** Seq: 0xC857FD5D  Ack: 0xD696D652  Win: 0x25B0  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/04-23:01:04.413693 192.168.24.52:1155 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:8183 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x33FAFECB  Ack: 0xC89DD209  Win: 0xFFFF  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/04-23:01:04.414242 192.168.24.52:1155 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:6059
***AP*** Seq: 0xC89DD209  Ack: 0x33FB0ECB  Win: 0x4470  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/04-23:02:12.546056 192.168.24.52:1156 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:8222 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD4FA9504  Ack: 0xCBEA4102  Win: 0xFFFF  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/04-23:02:43.905853 192.168.24.52:1158 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:8271 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x149F67E6  Ack: 0xCE8220F5  Win: 0xFFFF  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/04-23:03:55.843945 192.168.24.52:1163 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:8351 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x42A64E8  Ack: 0xD2418614  Win: 0xFFFA  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/04-23:05:32.038454 192.168.24.52:1164 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:8563 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xEB6EA2EC  Ack: 0xD86582D4  Win: 0xFFFF  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/04-23:06:50.542934 192.168.24.52:1168 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:9009 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xCE3E6CB7  Ack: 0xDE495C21  Win: 0xFFFF  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/04-23:07:29.494540 192.168.24.52:1170 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:9148 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x174949F5  Ack: 0xDFFB3178  Win: 0xFFFF  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/05-23:45:51.187698 192.168.24.52:1335 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:49771 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x64B67A68  Ack: 0xA6A6D208  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/06-22:17:50.139214 192.168.24.52:2199 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:48642 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x560403D1  Ack: 0x8FA2957A  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/07-22:58:02.173934 192.168.24.52:1726 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:14853 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x90FCCA30  Ack: 0x5CD7C986  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/14-20:42:24.139407 192.168.24.52:1191 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:4680 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x50493D06  Ack: 0xD2CB5C30  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/15-23:11:30.120510 192.168.24.52:1134 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:5120 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x9769FE00  Ack: 0x3ADE07DE  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/16-22:57:34.830715 192.168.24.52:1373 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:14911 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xF3A767A2  Ack: 0x3AF22E24  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/16-23:09:19.112714 192.168.24.52:1409 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:15650 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xA2285725  Ack: 0x67BE54BD  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/16-23:10:06.978096 192.168.24.52:1410 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:15715 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xC7BE8C  Ack: 0x6A93E157  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/16-23:10:54.569759 192.168.24.52:1412 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:15770 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x624D0DF7  Ack: 0x6D0D1DB0  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/16-23:13:51.184553 192.168.24.52:1413 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:15890 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xCB8E5631  Ack: 0x78F360C6  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/16-23:14:40.630669 192.168.24.52:1414 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:15942 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0xEF3C6C5C  Ack: 0x7B029EF1  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/16-23:15:35.043818 192.168.24.52:1417 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:16192 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xA312AC7C  Ack: 0x7EDEABFC  Win: 0xFB33  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/16-23:24:11.106950 192.168.24.52:1453 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:17842 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x5D17A5D1  Ack: 0xA0132FC2  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/16-23:24:53.016150 192.168.24.52:1455 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:17951 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xF4637A30  Ack: 0xA1778036  Win: 0xFB33  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/16-23:25:08.572679 192.168.24.52:1455 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:18103 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xF4664E94  Ack: 0xA1779FDF  Win: 0xFB33  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/16-23:25:27.384986 192.168.24.52:1456 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:18131 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xA92686D9  Ack: 0xA4F9B449  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/16-23:30:03.492621 192.168.24.52:1460 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:18327 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x8A3ED8B8  Ack: 0xB667CFE0  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/16-23:32:08.626178 192.168.24.52:1461 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:18612 IpLen:20 DgmLen:808 DF
***AP*** Seq: 0x1DE5B5AE  Ack: 0xBD9440CC  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/16-23:33:19.134699 192.168.24.52:1464 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:18771 IpLen:20 DgmLen:822 DF
***AP*** Seq: 0x8274573D  Ack: 0xC14DABFA  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/16-23:36:37.317096 192.168.24.52:1465 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:18852 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x35E699C3  Ack: 0xCD782484  Win: 0xFB33  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/16-23:38:11.596127 192.168.24.52:1466 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:19025 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xBEC6E0C  Ack: 0xD3E4534D  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/16-23:40:59.326781 192.168.24.52:1474 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:19434 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xB70C6E3A  Ack: 0xDE9F24AB  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/16-23:41:37.447188 192.168.24.52:1475 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:19513 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x444792ED  Ack: 0xE0E30ADB  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/16-23:42:16.570675 192.168.24.52:1476 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:19635 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x58E0FA5B  Ack: 0xE36AA6FF  Win: 0xFB1D  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/16-23:44:23.663478 192.168.24.52:1479 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:19757 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xED093613  Ack: 0xEC941E6C  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/16-23:45:22.666429 192.168.24.52:1480 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:20047 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x6A601361  Ack: 0xEF2170CB  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/16-23:46:03.793233 192.168.24.52:1481 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:20304 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0xA32F1D6D  Ack: 0xF18FCD36  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/16-23:47:43.395841 192.168.24.52:1483 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:20539 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xE454AD5C  Ack: 0xF7393586  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/16-23:48:44.709647 192.168.24.52:1484 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:20790 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xEB0E8AE5  Ack: 0xFB351EE4  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/16-23:49:42.189942 192.168.24.52:1485 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:21009 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x373D713  Ack: 0xFFA93196  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/16-23:50:21.196199 192.168.24.52:1488 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:21213 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0x77F6D50A  Ack: 0x14BC747  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/16-23:51:55.631087 192.168.24.52:1489 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:21372 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x2FBE4B44  Ack: 0x7AA50AE  Win: 0xFB33  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/16-23:53:59.434385 192.168.24.52:1490 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:21695 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x69C0F44B  Ack: 0x10084D0D  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-21:26:46.695804 192.168.24.52:1070 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:1646 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0x36335EFD  Ack: 0x1ACCB13B  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/17-21:27:47.343812 192.168.24.52:1072 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:1804 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x95533A14  Ack: 0x1EB0CAC0  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/17-21:32:40.876311 192.168.24.52:1074 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:1909 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x352C93A  Ack: 0x31482D4D  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/17-21:34:51.841102 192.168.24.52:1079 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:2141 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xD69BF615  Ack: 0x3926DCF8  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-21:35:09.360358 192.168.24.52:1079 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:7445
***AP*** Seq: 0x39276451  Ack: 0xD69C225A  Win: 0x8310  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/17-21:36:45.814923 192.168.24.52:1080 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:2271 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x2EB2809C  Ack: 0x411EAC8A  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-21:46:41.708032 192.168.24.52:1101 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:3135 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0x2C5FFA14  Ack: 0x641D8DB6  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-21:47:30.128943 192.168.24.52:1102 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:3333 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xA1F066A  Ack: 0x683BE82A  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-21:49:52.959323 192.168.24.52:1105 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:3581 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0x2603CA69  Ack: 0x7153BB3F  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-21:50:44.542792 192.168.24.52:1106 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:3826 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xFE3E3AF4  Ack: 0x738A1DE3  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-21:52:33.614163 192.168.24.52:1107 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:4119 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xCC62AA82  Ack: 0x7BA2A192  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-21:54:24.451364 192.168.24.52:1110 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:4341 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xA0968B6D  Ack: 0x82ABB1F8  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-21:55:54.095435 192.168.24.52:1111 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:4533 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xA5A1DE40  Ack: 0x8736C112  Win: 0xFB33  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/17-21:58:21.843599 192.168.24.52:1112 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:4720 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xE376F40  Ack: 0x9261EF21  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-21:58:24.334224 192.168.24.52:1112 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:10233
***AP*** Seq: 0x9261F5CA  Ack: 0xE37919B  Win: 0x6D38  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-21:59:47.448223 192.168.24.52:1113 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:4792 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x5465EEA1  Ack: 0x971B466E  Win: 0xFB33  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/17-22:07:37.546136 192.168.24.52:1121 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:5147 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x9FA964E9  Ack: 0xB562FE78  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/17-22:24:41.958166 192.168.24.52:1152 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:6010 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xE3617C6D  Ack: 0xF4BE0FCB  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/17-22:25:26.953198 192.168.24.52:1153 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:6109 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x146B75E  Ack: 0xF7584EB0  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-22:27:58.855919 192.168.24.52:1154 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:6242 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0x56DE3876  Ack: 0x9CD30A  Win: 0xFB33  TcpLen: 20

[**] [119:15:1] (http_inspect) OVERSIZE REQUEST-URI DIRECTORY [**]
05/17-22:27:59.693456 192.168.24.52:1154 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:6360 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0x56E0B764  Ack: 0x9CD30A  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-22:28:54.027739 192.168.24.52:1155 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:6463 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xDE7D3D4  Ack: 0x531CA14  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-22:30:03.760245 192.168.24.52:1156 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:6666 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x7888E499  Ack: 0x87C9008  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-22:30:49.208124 192.168.24.52:1157 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:6863 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x2F66A2C1  Ack: 0xB4595D6  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-22:31:27.587531 192.168.24.52:1158 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:7037 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x1CC0D388  Ack: 0xE0A01F5  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-22:32:44.121192 192.168.24.52:1159 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:7255 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x87E434E1  Ack: 0x12E38898  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-22:33:23.000009 192.168.24.52:1162 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:7469 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x87A714FD  Ack: 0x154A80D6  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-22:34:10.508164 192.168.24.52:1163 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:7648 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x53161ECA  Ack: 0x186348AC  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-22:34:59.231836 192.168.24.52:1164 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:7867 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x7569F595  Ack: 0x1AD336B2  Win: 0xFB33  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/17-22:35:52.956467 192.168.24.52:1165 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:8072 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x4125DA39  Ack: 0x1F7DF82C  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/17-22:37:50.636492 192.168.24.52:1169 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:8671 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xE40B2B59  Ack: 0x25F86091  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-22:40:38.188609 192.168.24.52:1188 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:9078 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xCF242000  Ack: 0x311DE8D3  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-22:41:37.575088 192.168.24.52:1191 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:9333 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xA6C740C  Ack: 0x345E0E4A  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-22:44:21.587506 192.168.24.52:1206 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:10057 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x7E27E7DD  Ack: 0x3F44E432  Win: 0xFB33  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/17-22:45:28.215921 192.168.24.52:1207 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:10225 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x3B4D781F  Ack: 0x439DA3A1  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-22:47:55.844680 192.168.24.52:1209 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:10486 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x9BC230D1  Ack: 0x4C33F817  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-22:48:49.497161 192.168.24.52:1210 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:10762 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x56E20B50  Ack: 0x4FB65862  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-22:49:27.802768 192.168.24.52:1211 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:10995 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x747B683A  Ack: 0x51FBBED2  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-22:50:55.419393 192.168.24.52:1212 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:11246 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x59C7E17D  Ack: 0x56DAE6E7  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-22:51:52.498336 192.168.24.52:1215 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:11446 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xDE9C630F  Ack: 0x5B031A32  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-22:54:13.026883 192.168.24.52:1216 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:11661 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0xCB172DEF  Ack: 0x63BF8602  Win: 0xFB33  TcpLen: 20

[**] [119:15:1] (http_inspect) OVERSIZE REQUEST-URI DIRECTORY [**]
05/17-22:54:13.833926 192.168.24.52:1216 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:11726 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0xCB188B6F  Ack: 0x63BF8602  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-22:55:09.280429 192.168.24.52:1217 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:11961 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0x3F255EAE  Ack: 0x675760B6  Win: 0xFB33  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/17-22:57:28.885462 192.168.24.52:1218 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:12124 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x57C03C62  Ack: 0x7044E9F1  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/17-22:58:38.105208 192.168.24.52:1221 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:12387 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x2929B0AB  Ack: 0x74E3E18B  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/18-22:53:40.275001 192.168.24.52:1091 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:2600 IpLen:20 DgmLen:1084 DF
***AP*** Seq: 0x7417328E  Ack: 0x9771C77F  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-21:28:39.432829 192.168.24.52:1094 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:1963 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x8B6488D1  Ack: 0x8C85AD58  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-21:29:18.920385 192.168.24.52:1095 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:2198 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xE003CB9B  Ack: 0x8DEC5E86  Win: 0xFB33  TcpLen: 20

[**] [119:15:1] (http_inspect) OVERSIZE REQUEST-URI DIRECTORY [**]
05/19-21:29:19.765574 192.168.24.52:1095 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:2309 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xE00629C5  Ack: 0x8DEC5E86  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-21:30:41.435046 192.168.24.52:1098 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:2444 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x79D36A43  Ack: 0x93E07E9A  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-21:32:51.216668 192.168.24.52:1101 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:2634 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x6103D938  Ack: 0x9C0466C2  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-21:33:50.103217 192.168.24.52:1102 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:2971 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xC209BB4E  Ack: 0x9FE3F864  Win: 0xFB33  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/19-21:39:50.352701 192.168.24.52:1152 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:4865 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xB4F91B24  Ack: 0xB6A82907  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-21:48:27.267815 192.168.24.52:1207 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:5698 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x9F2CC9B7  Ack: 0xD721C9BC  Win: 0xFB33  TcpLen: 20

Go to: previous range, next range, all alerts, overview page

SnortSnarf brought to you courtesy of Silicon Defense
Authors: Jim Hoagland and Stuart Staniford
See also the Snort Page by Marty Roesch
Page generated at Tue Sep 14 05:05:29 2010

192.168.24.52	Whois lookup at:	ARIN	RIPE	APNIC	Geektools
	DNS lookup at:	Amenesi	TRIUMF	Princeton
	More lookup links:	Dshield	Sam Spade