I have not seen these before, but the log entry is consistent with other
attacks that are handled by SW. The log entry states "Priority Attack
Dropped" and a "Ripper Attack Dropped", which would indicate that the SW
detected and prevented the attack ("dropped").
Todd
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On
Behalf Of Dude, Curtis
Sent: Monday, March 11, 2002 3:20 PM
To: [EMAIL PROTECTED]
Subject: RE: [SonicWALL]- Two new alerts in Log File
http://www.sonicwall.com/products/demo/attack.html
PRIORITY ATTACK
Priority is a Trojan Horse attack that allows an attacker to perform illicit
activities on a remote computer communicating over TCP port 16969.
RIPPER ATTACK
Ripper is a Trojan Horse attack that allows an attacker to steal passwords
from a remote computer communicating over TCP port 2023.
Does this mean I HAVE a Trojan or was ATTEMPTED to be compromised?
-Curtis
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On
Behalf Of Chris Hunt
Sent: Monday, March 11, 2002 4:10 PM
To: [EMAIL PROTECTED]
Subject: Re: [SonicWALL]- Two new alerts in Log File
Have not seen those before on this list. Have you found out what they are
or where they came from?
Chris
At 08:46 AM 03/11/2002 -0500, you wrote:
>For the first time ever I got a "Priority Attack Dropped" and a "Ripper
>Attack Dropped" in my log file. What are these?
>
>-Curtis
---
[This E-mail scanned for viruses by Declude/F-Prot Virus]
============================================================================
=======================
To unsubscribe, send email to [EMAIL PROTECTED] In the body of the email
put the following: unsubscribe sonicwall your_name
The archive of this list is at
http://www.mail-archive.com/sonicwall%40peake.com/
---
[This E-mail scanned for viruses by Declude/F-Prot Virus]
============================================================================
=======================
To unsubscribe, send email to [EMAIL PROTECTED] In the body of the email
put the following: unsubscribe sonicwall your_name
The archive of this list is at
http://www.mail-archive.com/sonicwall%40peake.com/
---
[This E-mail scanned for viruses by Declude Virus]
---
[This E-mail scanned for viruses by Declude Virus]
---
[This E-mail scanned for viruses by Declude/F-Prot Virus]
===================================================================================================
To unsubscribe, send email to [EMAIL PROTECTED] In the body of the email put the
following: unsubscribe sonicwall your_name
The archive of this list is at http://www.mail-archive.com/sonicwall%40peake.com/
