It all depends. Is your machines IP address 192.168.0.158? It could be
someone on your segment, and since your NIC is in promiscuious mode,
it sees the traffic.

C-Ya,
Kenny
 
Derek Doucette wrote:
> 
> Hey there I was just checking through my logs and came across this:
> 
>         Jun 18 21:56:00 keene snort[18571]: 
>IDS296/http-whisker-splicing-attack-space: 192.168.0.158:3004 -> 151.193.165.62:80
> 
> now am I confused or is this coming to from my comp to someones web server?  Does 
>anyone have any ideas??


-- 
---------------------------------------------------
 Kenneth E. Lussier
 Geek by nature, Linux by choice
 PGP KeyID 0xD71DF198
 Public key available @ http://pgp.mit.edu

**********************************************************
To unsubscribe from this list, send mail to
[EMAIL PROTECTED] with the following text in the
*body* (*not* the subject line) of the letter:
unsubscribe gnhlug
**********************************************************

Reply via email to