Hi all
I received this type of
error:
Observance Type : Intrusion Detection
Combined Event Count : 1
Cleared Flag : No
Target DNS Name :
Target IP Address : 65.65.65.65
Target Object Name : 16705
Target Object Type : Target Port
Target Service :
Source DNS Name :
Source IP Address : 65.65.65.65
SourcePort Name : 16705
Sensor IP Address : 192.168.91.39
Attribute Value Pairs for Event Number : 1
Attribute Name : :URL
Attribute Value : AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
Attribute Name : :arg
Attribute Value : AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
Attribute Name : :evasions
Attribute Value : uses %u;
Attribute Name : :accessed
Attribute Value : yes
Attribute Name : :code
Attribute Value : 200
Attribute Name : :victim-ip-addr
Attribute Value : 65.65.65.65
Attribute Name : :victim-port
Attribute Value : 1094795585
Attribute Name : :intruder-ip-addr
Attribute Value : 65.65.65.65
Attribute Name : :intruder-port
Attribute Value : 1094795585
Attribute Name : algorithm-id
Attribute Value : 1094795585
Event Number : 2
Date/Time : 2003-03-20 15:03:05 CET
Tag Name : UserIssue_109479558
Alert Name : UserIssue_109479558
Severity : Medium
Tag Brief Description :
Observance Type : Intrusion Detection
Combined Event Count : 1
Cleared Flag : No
Target DNS Name :
Target IP Address : 65.65.65.65
Target Object Name : 16705
Target Object Type : Target Port
Target Service :
Source DNS Name :
Source IP Address : 65.65.65.65
SourcePort Name : 16705
Sensor IP Address : 192.168.91.39
Attribute Value Pairs for Event Number : 2
Attribute Name : :URL
Attribute Value : /IBMNSA.html
Attribute Name : :evasions
Attribute Value : uses %u;
Attribute Name : :accessed
Attribute Value : no
Attribute Name : :code
Attribute Value : 404
Attribute Name : :victim-ip-addr
Attribute Value : 65.65.65.65
Attribute Name : :victim-port
Attribute Value : 1094795585
Attribute Name : :intruder-ip-addr
Attribute Value : 65.65.65.65
Attribute Name : :intruder-port
Attribute Value : 1094795585
Attribute Name : algorithm-id
Attribute Value : 1094795585
Somebody known what it does mean?
Thanks to all
Lorenzo
