If you're running v1.8 of Snort, there should be a link in the alert that points to a page on Whitehat or one of a couple other sites that describe the exploit.
If you're not seeing this, head over to http://www.whitehats.com/ids/index.html and do a search on the vulnerability. Having said that, it looks like the site is down again. Since Max has been in jail, the site has been a bit flaky. You might also try http://cve.mitre.org or bugtraq at http://www.securityfocus.com Good luck! -----Original Message----- From: Martin Smith [mailto:[EMAIL PROTECTED]] Sent: Monday, November 19, 2001 10:43 AM To: [EMAIL PROTECTED] Subject: Snort Question I have been getting this alert, but I can't find out what it is or what its trying to do. Is there a site that has this information? WEB-MISC compaq nsight directory traversal.... Thanks for your help, Mart _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp