SnortSnarf alert page

Source: 192.168.24.52: #401-500

SnortSnarf v021111.1

Signature section (16810)

Top 20 source IPs

Top 20 dest IPs

Looking using input module SnortFileInput, with sources:

/var/log/snort/alert

Earliest: 21:32:40.876311 on 05/17/2010
Latest: 22:12:20.015514 on 05/20/2010

6 different signatures are present for 192.168.24.52 as a source

1 instances of (snort_decoder) WARNING: TCP Data Offset is less than 5!
4 instances of (http_inspect) DOUBLE DECODING ATTACK
12 instances of (http_inspect) OVERSIZE CHUNK ENCODING
32 instances of (http_inspect) OVERSIZE REQUEST-URI DIRECTORY
326 instances of (http_inspect) BARE BYTE UNICODE ENCODING
328 instances of (http_inspect) IIS UNICODE CODEPOINT ENCODING

There are 1 distinct destination IPs in the alerts of the type on this page.

192.168.24.52 Whois lookup at: ARIN RIPE APNIC Geektools

DNS lookup at: Amenesi TRIUMF Princeton

More lookup links: Dshield Sam Spade

Go to: previous range, next range, all alerts, overview page

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/17-21:32:40.876311 192.168.24.52:1074 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:1909 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x352C93A  Ack: 0x31482D4D  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/17-21:34:51.841102 192.168.24.52:1079 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:2141 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xD69BF615  Ack: 0x3926DCF8  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-21:35:09.360358 192.168.24.52:1079 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:7445
***AP*** Seq: 0x39276451  Ack: 0xD69C225A  Win: 0x8310  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/17-21:36:45.814923 192.168.24.52:1080 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:2271 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x2EB2809C  Ack: 0x411EAC8A  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-21:46:41.708032 192.168.24.52:1101 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:3135 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0x2C5FFA14  Ack: 0x641D8DB6  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-21:47:30.128943 192.168.24.52:1102 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:3333 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xA1F066A  Ack: 0x683BE82A  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-21:49:52.959323 192.168.24.52:1105 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:3581 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0x2603CA69  Ack: 0x7153BB3F  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-21:50:44.542792 192.168.24.52:1106 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:3826 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xFE3E3AF4  Ack: 0x738A1DE3  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-21:52:33.614163 192.168.24.52:1107 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:4119 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xCC62AA82  Ack: 0x7BA2A192  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-21:54:24.451364 192.168.24.52:1110 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:4341 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xA0968B6D  Ack: 0x82ABB1F8  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-21:55:54.095435 192.168.24.52:1111 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:4533 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xA5A1DE40  Ack: 0x8736C112  Win: 0xFB33  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/17-21:58:21.843599 192.168.24.52:1112 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:4720 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xE376F40  Ack: 0x9261EF21  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-21:58:24.334224 192.168.24.52:1112 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:10233
***AP*** Seq: 0x9261F5CA  Ack: 0xE37919B  Win: 0x6D38  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-21:59:47.448223 192.168.24.52:1113 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:4792 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x5465EEA1  Ack: 0x971B466E  Win: 0xFB33  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/17-22:07:37.546136 192.168.24.52:1121 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:5147 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x9FA964E9  Ack: 0xB562FE78  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/17-22:24:41.958166 192.168.24.52:1152 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:6010 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xE3617C6D  Ack: 0xF4BE0FCB  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/17-22:25:26.953198 192.168.24.52:1153 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:6109 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x146B75E  Ack: 0xF7584EB0  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-22:27:58.855919 192.168.24.52:1154 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:6242 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0x56DE3876  Ack: 0x9CD30A  Win: 0xFB33  TcpLen: 20

[**] [119:15:1] (http_inspect) OVERSIZE REQUEST-URI DIRECTORY [**]
05/17-22:27:59.693456 192.168.24.52:1154 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:6360 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0x56E0B764  Ack: 0x9CD30A  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-22:28:54.027739 192.168.24.52:1155 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:6463 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xDE7D3D4  Ack: 0x531CA14  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-22:30:03.760245 192.168.24.52:1156 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:6666 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x7888E499  Ack: 0x87C9008  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-22:30:49.208124 192.168.24.52:1157 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:6863 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x2F66A2C1  Ack: 0xB4595D6  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-22:31:27.587531 192.168.24.52:1158 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:7037 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x1CC0D388  Ack: 0xE0A01F5  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-22:32:44.121192 192.168.24.52:1159 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:7255 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x87E434E1  Ack: 0x12E38898  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-22:33:23.000009 192.168.24.52:1162 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:7469 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x87A714FD  Ack: 0x154A80D6  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-22:34:10.508164 192.168.24.52:1163 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:7648 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x53161ECA  Ack: 0x186348AC  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-22:34:59.231836 192.168.24.52:1164 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:7867 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x7569F595  Ack: 0x1AD336B2  Win: 0xFB33  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/17-22:35:52.956467 192.168.24.52:1165 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:8072 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x4125DA39  Ack: 0x1F7DF82C  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/17-22:37:50.636492 192.168.24.52:1169 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:8671 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xE40B2B59  Ack: 0x25F86091  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-22:40:38.188609 192.168.24.52:1188 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:9078 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xCF242000  Ack: 0x311DE8D3  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-22:41:37.575088 192.168.24.52:1191 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:9333 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xA6C740C  Ack: 0x345E0E4A  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-22:44:21.587506 192.168.24.52:1206 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:10057 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x7E27E7DD  Ack: 0x3F44E432  Win: 0xFB33  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/17-22:45:28.215921 192.168.24.52:1207 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:10225 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x3B4D781F  Ack: 0x439DA3A1  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-22:47:55.844680 192.168.24.52:1209 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:10486 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x9BC230D1  Ack: 0x4C33F817  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-22:48:49.497161 192.168.24.52:1210 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:10762 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x56E20B50  Ack: 0x4FB65862  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-22:49:27.802768 192.168.24.52:1211 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:10995 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x747B683A  Ack: 0x51FBBED2  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-22:50:55.419393 192.168.24.52:1212 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:11246 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x59C7E17D  Ack: 0x56DAE6E7  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-22:51:52.498336 192.168.24.52:1215 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:11446 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xDE9C630F  Ack: 0x5B031A32  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-22:54:13.026883 192.168.24.52:1216 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:11661 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0xCB172DEF  Ack: 0x63BF8602  Win: 0xFB33  TcpLen: 20

[**] [119:15:1] (http_inspect) OVERSIZE REQUEST-URI DIRECTORY [**]
05/17-22:54:13.833926 192.168.24.52:1216 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:11726 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0xCB188B6F  Ack: 0x63BF8602  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/17-22:55:09.280429 192.168.24.52:1217 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:11961 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0x3F255EAE  Ack: 0x675760B6  Win: 0xFB33  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/17-22:57:28.885462 192.168.24.52:1218 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:12124 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x57C03C62  Ack: 0x7044E9F1  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/17-22:58:38.105208 192.168.24.52:1221 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:12387 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x2929B0AB  Ack: 0x74E3E18B  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/18-22:53:40.275001 192.168.24.52:1091 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:2600 IpLen:20 DgmLen:1084 DF
***AP*** Seq: 0x7417328E  Ack: 0x9771C77F  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-21:28:39.432829 192.168.24.52:1094 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:1963 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x8B6488D1  Ack: 0x8C85AD58  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-21:29:18.920385 192.168.24.52:1095 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:2198 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xE003CB9B  Ack: 0x8DEC5E86  Win: 0xFB33  TcpLen: 20

[**] [119:15:1] (http_inspect) OVERSIZE REQUEST-URI DIRECTORY [**]
05/19-21:29:19.765574 192.168.24.52:1095 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:2309 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xE00629C5  Ack: 0x8DEC5E86  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-21:30:41.435046 192.168.24.52:1098 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:2444 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x79D36A43  Ack: 0x93E07E9A  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-21:32:51.216668 192.168.24.52:1101 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:2634 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x6103D938  Ack: 0x9C0466C2  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-21:33:50.103217 192.168.24.52:1102 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:2971 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xC209BB4E  Ack: 0x9FE3F864  Win: 0xFB33  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/19-21:39:50.352701 192.168.24.52:1152 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:4865 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xB4F91B24  Ack: 0xB6A82907  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-21:48:27.267815 192.168.24.52:1207 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:5698 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x9F2CC9B7  Ack: 0xD721C9BC  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-21:49:18.543452 192.168.24.52:1208 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:5863 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xD62913F1  Ack: 0xDA4ADAD6  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-21:52:24.684766 192.168.24.52:1215 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:6101 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x22ADFFAB  Ack: 0xE5B3525C  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-21:58:25.956489 192.168.24.52:1254 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:6939 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xD44EAE31  Ack: 0xFC8E2031  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-21:59:49.577458 192.168.24.52:1255 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:7326 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x75079794  Ack: 0x14760B0  Win: 0xFB33  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/19-22:08:27.161147 192.168.24.52:1268 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:7846 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x6FB8C256  Ack: 0x228610F9  Win: 0xFAA2  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/19-22:17:30.989885 192.168.24.52:1279 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:8120 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x53020801  Ack: 0x456D5843  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-22:19:32.947979 192.168.24.52:1280 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:8201 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x4C39B461  Ack: 0x4B8AC0B1  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-22:23:05.382646 192.168.24.52:1286 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:8751 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x75BD22D8  Ack: 0x5A013CCD  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-22:23:40.763755 192.168.24.52:1287 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:9129 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xAB83DAC5  Ack: 0x5B7EA976  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-22:24:51.810916 192.168.24.52:1288 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:9394 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xB38AD8DF  Ack: 0x6026234C  Win: 0xFB33  TcpLen: 20

[**] [119:15:1] (http_inspect) OVERSIZE REQUEST-URI DIRECTORY [**]
05/19-22:24:52.604420 192.168.24.52:1288 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:9434 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0xB38BB34F  Ack: 0x6026234C  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-22:26:11.672678 192.168.24.52:1289 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:9823 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x3B2C778E  Ack: 0x64B6FE5A  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-22:27:43.730764 192.168.24.52:1290 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:21701
***AP*** Seq: 0x6B9A86E8  Ack: 0xE09FE9E5  Win: 0xCA0E  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-22:29:53.648221 192.168.24.52:1296 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:10322 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0xC8D64AB2  Ack: 0x734AEC72  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-22:30:33.505025 192.168.24.52:1297 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:10635 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0xF96C8501  Ack: 0x753A02CB  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-22:31:08.422764 192.168.24.52:1298 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:10918 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x373EAABA  Ack: 0x7737D6E4  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-22:32:25.729200 192.168.24.52:1299 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:11220 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xD005F1C8  Ack: 0x7D5B65C8  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-22:33:26.083251 192.168.24.52:1303 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:11427 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x43AE147F  Ack: 0x811556A6  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/19-22:34:56.829033 192.168.24.52:1304 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:11726 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xD219CF08  Ack: 0x866B7F08  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/19-22:35:25.049008 192.168.24.52:1306 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:11963 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x4D229CB7  Ack: 0x87A559EB  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-22:42:00.712329 192.168.24.52:1309 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:12105 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x6A90CB50  Ack: 0xA02E93B7  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-22:42:47.955820 192.168.24.52:1310 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:12312 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xDAD4F381  Ack: 0xA436F619  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-22:44:33.050620 192.168.24.52:1312 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:12775 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x7F839845  Ack: 0xAA11950B  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-22:46:51.105425 192.168.24.52:1315 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:12978 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x6CF04AF9  Ack: 0xB25BE286  Win: 0xFB33  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/19-22:47:13.615111 192.168.24.52:1315 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:13299 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x6CF6B506  Ack: 0xB25C01F7  Win: 0xFB33  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/19-22:49:48.526562 192.168.24.52:1321 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:13932 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xA2831773  Ack: 0xBEA85506  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-22:50:07.596786 192.168.24.52:1321 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:978
***AP*** Seq: 0xA28334D2  Ack: 0xBEA99B8A  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/20-09:47:51.573285 192.168.24.52:1547 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:29581 IpLen:20 DgmLen:191 DF
***AP*** Seq: 0xBAD359D6  Ack: 0x6FD82F5D  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/20-09:55:40.295061 192.168.24.52:1582 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:6504
***AP*** Seq: 0x8CC29E19  Ack: 0x5710E62C  Win: 0x5C20  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/20-10:20:34.095860 192.168.24.52:1722 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1454
***AP*** Seq: 0x937D489F  Ack: 0xEB4E3CD9  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/20-21:25:23.716231 192.168.24.52:1071 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:1164 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xA49CFEBE  Ack: 0xB5DAAD4B  Win: 0xFB34  TcpLen: 20

[**] [119:15:1] (http_inspect) OVERSIZE REQUEST-URI DIRECTORY [**]
05/20-21:25:24.535285 192.168.24.52:1071 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:1246 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xA49EBE8A  Ack: 0xB5DAAD4B  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/20-21:27:21.157081 192.168.24.52:1072 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:1435 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x8544804  Ack: 0xBCAD8084  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/20-21:28:28.900973 192.168.24.52:1074 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:1720 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x74A12B63  Ack: 0xC163E302  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/20-21:30:32.904852 192.168.24.52:1075 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:1958 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0xC8589669  Ack: 0xC912E621  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/20-21:33:48.488710 192.168.24.52:1076 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:2236 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xEAC56A2F  Ack: 0xD51F333E  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/20-21:38:13.200369 192.168.24.52:1097 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:2858 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xFFA614D7  Ack: 0xE5EE1E32  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/20-21:41:21.985528 192.168.24.52:1098 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:3180 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x11946FF  Ack: 0xF157DF29  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/20-21:44:33.250962 192.168.24.52:1101 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:3414 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0xC83F0EFE  Ack: 0xFD76C220  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/20-21:45:17.480500 192.168.24.52:1102 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:4033 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x674F758B  Ack: 0x30A0CE  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/20-21:47:41.534819 192.168.24.52:1108 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:4457 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x8BCC123B  Ack: 0x9D82F49  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/20-21:49:30.708704 192.168.24.52:1109 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:4807 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xD6ABE21  Ack: 0x1091EEBB  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/20-21:50:15.345564 192.168.24.52:1110 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:5001 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x3427FD20  Ack: 0x13517CFA  Win: 0xFB33  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/20-21:50:57.191653 192.168.24.52:1111 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:5293 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xAD205D  Ack: 0x15EB64F9  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/20-21:50:58.326558 192.168.24.52:1111 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:13218
***AP*** Seq: 0x15EB64F9  Ack: 0xAD4E61  Win: 0x8310  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/20-21:51:46.358112 192.168.24.52:1113 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:5520 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xC9F7A87C  Ack: 0x191429DD  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/20-21:51:47.436746 192.168.24.52:1113 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:13269
***AP*** Seq: 0x191429DD  Ack: 0xC9F7D6B3  Win: 0x8310  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/20-22:12:20.015514 192.168.24.52:1148 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:7515 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x333F2004  Ack: 0x6681E725  Win: 0xFB34  TcpLen: 20

Go to: previous range, next range, all alerts, overview page

SnortSnarf brought to you courtesy of Silicon Defense
Authors: Jim Hoagland and Stuart Staniford
See also the Snort Page by Marty Roesch
Page generated at Fri Jul 30 05:05:23 2010

192.168.24.52	Whois lookup at:	ARIN	RIPE	APNIC	Geektools
	DNS lookup at:	Amenesi	TRIUMF	Princeton
	More lookup links:	Dshield	Sam Spade