[Silicon Defense logo]

SnortSnarf signature page

(http_inspect) OVERSIZE CHUNK ENCODING

SnortSnarf v021111.1

Signature section (16810)Top 20 source IPsTop 20 dest IPs

57 alerts with this signature using input module SnortFileInput, with sources:

Earliest such alert at 00:46:53.779056 on 09/17/2009
Latest such alert at 12:46:15.985240 on 08/01/2010

(http_inspect) OVERSIZE CHUNK ENCODING 36 sources 1 destinations
Priority: N/AClassification: N/A

Sources triggering this attack signature

Source# Alerts (sig)# Alerts (total)# Dsts (sig)# Dsts (total)
192.168.24.521270311
130.54.208.193469811
131.112.72.42211
66.249.65.11321511
192.168.24.5123411
222.0.145.1732211
203.211.239.142211
203.189.48.1582211
221.190.32.1952211
221.19.16.721111
220.28.26.421111
130.54.208.20112511
121.94.3.101111
210.255.77.1581111
201.206.177.181111
133.30.158.801111
61.114.94.2221111
122.21.178.1141111
202.221.175.391111
61.201.1.2311111
24.54.135.1801111
217.83.190.2451111
150.162.181.2001211
200.195.95.381111
200.215.118.361111
66.249.65.1041111
131.112.174.571611
213.4.106.851111
66.249.66.211011
61.44.222.2221111
150.61.31.781111
222.147.144.1091111
60.238.148.411111
202.212.56.1351111
125.52.8.2491111
15.228.172.1121111

Destinations receiving this attack signature

Destinations# Alerts (sig)# Alerts (total)# Srcs (sig)# Srcs (total)
192.168.24.11571680336935

SnortSnarf brought to you courtesy of Silicon Defense
Authors: Jim Hoagland and Stuart Staniford
See also the Snort Page by Marty Roesch
Page generated at Tue Sep 14 05:05:17 2010