[Snort-users] Snort-users] P2P GUNTella GET?

This is a discussion on [Snort-users] Snort-users] P2P GUNTella GET? within the Snort forums, part of the System Security and Security Related category; This is a multi-part message in MIME format. ------_=_NextPart_001_01C3845F.269FEFE2 Content-Type: multipart/alternative; boundary="----_=_NextPart_002_01C3845F....


Go Back   Usenet Forums > System Security and Security Related > Snort

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 09-29-2003
Scott Weller
 
Posts: n/a
Default [Snort-users] Snort-users] P2P GUNTella GET?

This is a multi-part message in MIME format.

------_=_NextPart_001_01C3845F.269FEFE2
Content-Type: multipart/alternative;
boundary="----_=_NextPart_002_01C3845F.269FEFE2"


------_=_NextPart_002_01C3845F.269FEFE2
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

What I have found, is that we have users that run an app called HotBar. =
It runs on the gnutella network, and it runs in the local machine, but us=
er account. I is always running, and tag's it's server, for updates, and=
=20files. for ecards, and such.. it hoses' outlook too.. =20

Scott A Weller, MCP=20
I.T Support/Network Security Technician<?xml:namespace prefix =3D o ns =3D=
=20"urn:schemas-microsoft-com:office:office" />


Polsinelli Shalton and Welte=20
700 W. 47th St., Ste. 1000=20
Kansas City, MO 64112=20
Phone: (816)360-4172 | Fax: (816) 753-1536
=20<http://www.pswlaw.com/> www.pswlaw.com

=20

=20

This electronic mail message contains CONFIDENTIAL information which is (=
a) ATTORNEY - CLIENT PRIVILEGED COMMUNICATION, WORK PRODUCT,=20
PROPRIETARY IN NATURE, OR OTHERWISE PROTECTED BY LAW FROM DISCLOSURE, and=
=20(b) intended only for the use of the Addressee(s) named herein.=20
If you are not an Addressee, or the person responsible for delivering thi=
s to an Addressee, you are hereby notified that reading,=20
copying, or distributing this message is prohibited. If you have received=
=20this electronic mail message in error, please reply to the=20
sender and take the steps necessary to delete the message completely from=
=20your computer system.

------_=_NextPart_002_01C3845F.269FEFE2
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; charset=3Diso-885=
9-1">


<META content=3D"MSHTML 6.00.2800.1226" name=3DGENERATOR></HEAD>
<BODY>
<DIV><FONT face=3DArial size=3D2><SPAN class=3D638314718-26092003>What I =
have found,=20
is that we have users that run an app called HotBar.&nbsp; It runs on the=
=20
gnutella network, and it runs in the local machine, but user account.&nbs=
p; I is=20
always running, and tag's it's server, for updates, and files.&nbsp;&nbsp=
; for=20
ecards, and such.. it hoses' outlook too..&nbsp; </SPAN></FONT></DIV>
<DIV class=3DSection1>
<P><B><SPAN style=3D"FONT-SIZE: 13.5pt">Scott A Weller, MCP</SPAN></B> <B=
R>I.T=20
Support/Network Security Technician<SPAN=20
style=3D"FONT-STYLE: normal"><?xml:namespace prefix =3D o ns =3D=20
"urn:schemas-microsoft-com:office:office" /><o:p></o:p></SPAN></P>
<P><IMG height=3D51 src=3D"cid:638314718@26092003-2a95" width=3D72=20
v:shapes=3D"_x0000_i1025"><BR>Polsinelli Shalton and Welte <BR>700 W. 47t=
h St.,=20
Ste. 1000 <BR>Kansas City, MO 64112 <BR>Phone: (816)360-4172 | Fax: (816)=
=20
753-1536<BR><A href=3D"http://www.pswlaw.com/"><SPAN=20
style=3D"FONT-SIZE: 7.5pt">www.pswlaw.com</SPAN></A></P>
<P><SPAN style=3D"FONT-FAMILY: Arial">&nbsp;<o:p></o:p></SPAN></P></DIV>
<DIV>&nbsp;</DIV>
<B><FONT size=3D1>
<P align=3Djustify><FONT size=3D2>This electronic mail message contains C=
ONFIDENTIAL=20
information</FONT></B></FONT><FONT size=3D2><FONT face=3D"Times New Roman=
">=20
</FONT><B>which is (a) ATTORNEY - CLIENT PRIVILEGED COMMUNICATION, WORK</=
B><FONT=20
face=3D"Times New Roman"> </FONT><B>PRODUCT, PROPRIETARY IN NATURE, OR OT=
HERWISE=20
PROTECTED BY LAW</B><FONT face=3D"Times New Roman"> </FONT><B>FROM DISCLO=
SURE, and=20
(b) intended only for the use of the</B><FONT face=3D"Times New Roman">=20
</FONT><B>Addressee(s) named herein. If you are not an Addressee, or=20
the</B><FONT face=3D"Times New Roman"> </FONT><B>person responsible for d=
elivering=20
this to an Addressee, you are</B><FONT face=3D"Times New Roman"> </FONT><=
B>hereby=20
notified that reading, copying, or distributing this</B><FONT=20
face=3D"Times New Roman"> </FONT><B>message is prohibited. If you have re=
ceived=20
this electronic mail</B><FONT face=3D"Times New Roman"> </FONT><B>message=
=20in=20
error, please reply to the sender and take the steps</B><FONT=20
face=3D"Times New Roman"> </FONT><B>necessary to delete the message compl=
etely=20
from your computer</B><FONT face=3D"Times New Roman"> </FONT></FONT><B><F=
ONT=20
size=3D2>system.</FONT></B><FONT face=3D"Times New Roman"></P></FONT>
</BODY></HTML>

------_=_NextPart_002_01C3845F.269FEFE2--

------_=_NextPart_001_01C3845F.269FEFE2
Content-Type: image/jpeg;
name="image001.jpg"
Content-Transfer-Encoding: base64
Content-ID: <638314718@26092003-2a95>
Content-Description: image001.jpg
Content-Location: image001.jpg

/9j/4AAQSkZJRgABAgAAZABkAAD/7AARRHVja3kAAQAEAAAAZAAA/+4AJkFkb2JlAGTAAAAAAQMA
FQQDBgoNAAAEcQAACtEAAA4eAAASLf/bAIQAAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEB
AQEBAQEBAQEBAQEBAQICAgICAgICAgICAwMDAwMDAwMDAwEBAQ EBAQECAQECAgIBAgIDAwMDAwMD
AwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMD/8IAEQgAMwBIAwERAAIR
AQMRAf/EAPMAAAICAQUBAAAAAAAAAAAAAAcJBggKAAECBAUDAQACAgMBA AAAAAAAAAAAAAAAAQIE
AwUGBxAAAAUDAwIHAAMAAAAAAAAAAgMEBQYAAQcQEQgSFCAwMU ETMxUhFhgRAAEEAQIDBQMHCQkA
AAAAAAECAwQFBgARIRITMSIUFQdBUTIQYYFCUiMzIHFigkOD0z WVoVMkNEQlVdVGEgABAgQCBgcJ
AQAAAAAAAAABAAIRMRIDIhMQIUFRYQQggaHB4TJCQFDwcZGx8X KCFBMBAAICAQIFBQEBAQAAAAAA
AQARITFBUWEQcYGRoSDwscHx0TDh/9oADAMBAAIRAxEAAAF/gcQotvIr36KIzsomVmwnnpXo0UuQ
dVmPB6HjW50kJhgfNr0ISGdqLMuYnkM+fZFrdJBb3RryZEUzE/wFdr6ZzzUhfZLiagFtso7ulVra
K32mn82oJYCbWfmSV0tOmV81PFG9Xwi60jvr5gvYQsPq5142kS XUMrzynMVarCN1I17nGvrooQGw
p9XbBedm8rhshupPQaDZHVkQjOpvXfaRuzQf/9oACAEBAAEFAqve1qm3IfHMMMd+YMgNH/rTJtNP
MGQlDhPIfHMzMtffQ44pOTlbNEsye5OkefmG87jyaMTFbj2dNr atjyQMGAxvJrhhDMcwibuScUpJ
5TSxQwY/4t7/AN7dXtvaMFy59TRfPWQooGTFOig5PiySrUbRkaZIjIHIuLErUP 2PuYTcoOjOFyZX
Any+M8i1K4jIQ5aC3yGNx1yx/OjMZSdTkR/xbkZ2m79jbh83qCYvNok3TmMS9kmMDfbuzttkqSGO
U0/WdqcHs++K/wBZ2qJMUvnz3CYk3QaMVOcexbIjXNeK82YzHWKShjMpqikofTY VxXmz4ZBsexbH
bX4Dvron69f/2gAIAQIAAQUC0Jb1B1AZy6/JTUJnLo5uUE6+tJUZSUITAGUnMuYTZSQIQTL9x1g6
VyMk0HpTUVYxQ6fSEAhLiQXNQJzfjoNt1ZdrjTk3+ct0KsWoZx WsYtuUeDuk9FHF9p1FmGBUEd0V
24FSYJAFLwK3ykmiIMJGSeDoBSUrYjoBQQW7voBRoyU4DjRHm0 QoNTiJdSR0E4oegjigUe6kgo9Q
aoF5X//aAAgBAwABBQLTet63ret/FettbaXq2l/WvbS1Xq1bV71t/FX9LaX0vp7b+HbwbeZ//9oA
CAECAgY/AtEYUt4rG89Sm/46lgeVGFTeGmAmhd5iGbxkPFYCChcdNUNc0uT2HyBoVcRTvWdb gLnY
VAqsyaE39ws5jS20GwlCKywYEgpvK8yyl4kdh8VcBlQO9f4fVm kdQ1qxZM2uMf4/IVY9QTm7SELb
bjAQ7avO36oMbca254pr+Yu24MlDenuqbTSO9P5g3GwMte+afc D2muQ+aa3aAhdbMLMZCCkEA8Yt
f3UgnasNA71ILMfDUjddM6KrZULuF3YsDgdGNwChaxO7FVcPS9 XR/9oACAEDAgY/AvaI+5//2gAI
AQEBBj8C1ueAHEn3DT0IWDmRWzPdVX0IblJacHDkk2Clogske0 c6lj3aUKLEKmG1x5F2k2VOe2+q
SiKITe/06/yGIf0uz/7rSRe4hUzGuHOurmyoL36RCJQmt/26ZhGe5jts93U198G4qXXDw5I1gla4
LxPsHOlZ92txxB7COw/I7IfcQyww2t555xQQ2000krcccWrZKUIQNyfYNTsT9PI9urGY3 U63kkaW
/Z3zCHEMqmS/CtmRFqC8sBKOAXzDnPEJDCbujtqbxO/h/M66XAD4SQHOgZLTaXeTm48u+2/HV3jt
cqQ/Fr5MdmKp8hyU4l+HGkAL6aEhThW/twGnrixxK/gVsZpD8iXNrJMVuOy6sNtuPh5CHGUOLUAO
YDffWHXMOPIdub3Iclq30oU494hFf5WmvZjxUg7PFctQ7vFZI0 qnRT2blsgkLqk18tdikhIWQqCG
jJBCDv8AD2abw3IoV3dY+2vovMqhTpdziiQdlv8ASSy5L8sYJH VaWPuk8U7fCWpEdxDzD7aHmXml
BbTrTqQttxtad0rQtB3BHaNM00N0syMssPLXlpOy/K4zRlWCEkcR1j021foLOsiCTsTgV2Pi5f8A
XVG3EkAcdKw26yKsyTKLbLmLqrg19s1kBxeuYahpe69hGdkwor z6mnh0W3TwlE/3m0jIpkHzGLS5
FS2L8Lu8zyI9dXq3Z5yEeJZ/Ea34dRI31lvqx6cZe5kFHYPOS8up1yJMLIqBmyd6zkOxgrWkyq Zh
1rZsHupabHIHENlwen0iMtbMiHmOaOsPIOy25DbdDIZdbI+FTa 9iPnGoHroY5XVNelNPlKUJKkeL
vcgCsWgV3b31qr7AL+YNHfbbfXr1l8BxTbGQ0NPBoJiHSPFH1L lMz7CRFcTx5mHKeWUkcU7A8NO0
0xwuv4nYeWMLUd1eWSGhKgIUTx+43cbH6CBrEbVA3jV13NjSVb fAqxhJLClH6qSYRH5zqdkU308z
a3gW+Ly6uJ5TUr3c8xegSWpQdfCWvDFlg95PMeI4HR5cGyvb2H yOaD8x26Z2Ora7svTjJcrx5xTQ
kRIkCW23OS/j0eGpTMxDKwhcaQvmCk95LiOBBGsqocD9LvUaO7mkVqtuLTI2D Oci1DaniuvrYtfU
QGupITIUhb7vMeU91KTrEoKMQyNU6JluWvPw01EsyGo0qFSdCQ 610+dDbzjSgk9h5TrD/T9r03zF
iXRFlFvZqpXgiwiVfj2qOGz02y+piMzN5lBzYB1PD36w3H52AZ VUjD4TIyK6nVbzcSYxTQlV9O94
jl6gbjxpDynOrts4vhvudZbZrSRGn3sSPGVt8aq+D/iCD7QFSwPzjVvjFoNo1nGLaXgAXIkpBDkS
Y1v+0jSEpV8/Z7dSsbvJdrGkwjsw4ibPTDmwxwYmV6i4lLkVxHZt8B7p4jR/3a07P+Rm/wAfVvNq
L2XIr3m6noPRLCWI61NU1ey/yAOIG6ZDageHxDX82tP6jN/j6xdpF3KNm3m+ULfZTav+NRCdqqbo
OPNiR1hHW8hQQVd3cHbX82tP6jN/j6i4zSybOY/OITIU9MnOwYcPf76ZYnqLQiI0n3/Ge6OJ1U4x
V8Y9ZGDa3lAByXKWS5LmO7ftJMhSlfNvt7Pk8ryWvEgI5lQpzJ 6NjXOq7XYUoAqb3+sk7oX9YHT0
jFHmMsrBupDPM3Aum0/ZXGeWIsoj3tuAn7GlNXOOXlYtG4PjKuY0nu9v3ha6ZH0/Ilqmxy7s3F8o
Hg6uY6nj2fehrpgfTpmRlbzGJ1h2Utnman3TifsojMrVFik+9x wkfZ15XjUARwvlVNnPHrWNi6n9
rNlEBTm31UjZtH1QPyVfhfvvw/1tf+e0n8L9z+H+r+R//9oACAEBAwE/IYAoAUNAZVXABFIQq2Lc
RXqYzlklkNZUX02W85/r/om46zRvFlbWQp5xasCtijF+60rOABAAosHIiYRPBte67rhOoQC 2EJYY
s/zN/MWZhoq26OmNtmwsLjUdtaItwAfBFE9sk39A4RUL9ds684LBCrq Arw2fPXrG4h1M8xTu1X8m
6ejF5P8A3a8BqiJZL/V14mAIq2x8zQiZoRssQgG1AigBGBERZ7Ee1gZzfBt5LQsmfBbF t+3T0KMU
QK9tDmpqZAI2WS4pZgHq0IYsIZpOPbFyyEceojF97TZ/Id7PQeIhkUGl2TWR+wJbI6PZkwuLJYCG
yIcygOQj2LYl9bCpZ8UgqSlmkozTRipwAJU5epf1YnwWjIy2Z2 u4dB5iiW2F+XmJggiMWq7ESWtE
F8tjHfSESoFeiTwFLKi8KIqS7UrqMd0qQmLW29qBNdcPgNgdae Gyv4KbXR1MrFV34bKGBSBCsBW1
0ikQLnPSuksqltQWh4OakiDqVVUpGKpEqSy1r6ht4zsGovwigu UaTqMrMz0fOn/IoOLYuuFt7SS7
rCXPqCzunfUM1ZEHINVdpEUtN/R7R8b7JxHtnxHs+j//2gAIAQIDAT8h8D/WcPjcAZj2B+bn9ghm
q9wfxUL9Zy+N+IK2KLHd2WdDr3e0Gcf0RlKghvphhBJ4GWRL3y u7zErPOse+pYLzwfpvo8xFaElI
bteuj9s+9dGZ0Blyc8YXjNceUwlOvzX46y/rFUNHI8ftulqFmCie3z8jkvufMHdQHTQuHGG710xD
6Kej/wCy/AZt0sn81OkI1dba7xu8FjG+pVfYhkXM983AcHW4NLfEsZzE5LW/rUQPZ+X/AMm809zk
9YXNLsWPR7z+EQCnuHdP4RLynVxi7j+ERwQNMFr0O83inscHp4 YHupw+ZCgH3vdv394TYXZJcJsL
ukwS+3/pmR7ocHkfSb8Dv6P/2gAIAQMDAT8h8EEfD74B+hV1KqDNEtEwSveJ14Ojwuq5mF49TU dJ
zDi2LE1gSXieiVWoppEXEtBm5aWx5lsti0LWGPCri+NSk8KYPm VX/P8A/9oADAMBAAIRAxEAABAT
zwQQHMDj5Ge7ipOBenjUOjuFCgBArAf/2gAIAQEDAT8QgO4hGVeBiqtAS64aIqmtYFSswL82NXAY
CEivBymCm6tKbrduviGq6ulxm0SyvDyl5sXBVdIC1AuCB9igTE xSWIongqYmSCFI/JQBljtrDVKW
L3ORH4QSGoDVyh0KLvN0mhHmqkAC7NnToN9AxqSwi2EDYgGvBl dUAhQ4KY12E1G2FzP5tFBOgLAm
IVXNA6XG6JREYZfBdo2MaKkNlXaE6VGMY8IbUq5W9CSKKSo0li ae2SQRwCQOXQlds/0H49P+lwu9
oVaQi+aGErKrzMmKqr1cqiumgxQ4GMArCJo4SW+A26wGgkFfbi v9kFCrcOETj7Vj7kyWHUjt1bmm
VMAKDHAu12tQiFeNy0AhEyexpolA7s1WJcnfCp5mUmLHDUVeqC 4BaktgvgRyjmwr+F25dCIuyK2o
QpLDb8uStAVgkAc1tVQPZDEE+kUoQLlVXDNwCSEJQEViIi25dc 4vU7RA7GBtAQ+DxV8WTsBMBxDk
gOnUCv2SFqjwiEpN+9T7QWAqHuNofHlkwBYVQKk7kgU0vrgrMo ZwmdOt3eFQQuTesvmwKSZusxgz
2UjfLEEAnLITnCXVutFAf0B063zdes93/cPP2ufg9Nfiew/vHk7VDX+X8c14/wD/2gAIAQIDAT8Q
nNQ4gvVsdTNdmg7y0dDAfkj2yY96TqO3J6xpQPXQdWtO+E7zWH fgdBQAG1cAd1h0FFXFK8jVGXhn
gseHd8Zerpavv6S3uymBYcuCjmNxBALaZQppo6SkwNujknoovO CDTXqnt5cu8TLBY5Dxdlpo2w3s
egqRHCJhE4qIMIo5Lvw4O4TnmOl/WWP5VXcKYAtW4TuPVjejlVm2uxYA4IEjNAtg2vKcBATgdHSK
EfOFalk4p9rVfoq7qC2KCNAgO4De8wKNXp2r7mHzWe+ZRu9cHy GDwbqSqFFt281zmWlOqAj+VAWj
ytkBVOEc4YqSpqiVSlRQlGTKyrucppFgN5SxfOXobRGwS2hWgn DnpFhq7Eo61agOgO0RTJPbX+05
ONXCYTsFPnibCMncGHAeu96YmNafuxCzw2BsFDZyIyvP23lBHS NVwXA1VhsIfe34mQvwA4XKr4Mu
JywIOAwHYAd98+GWo7Mn05OzhOEnNibS3ow8hRBRu6r4u4giUv 6L4u7gaBacl6pg7FPWaDGjB9OD
u7eV+jnmat+m4ajdvfO/X6P/2gAIAQMDAT8Q8QUpDDL9vmDND0mt39FqcY4rx99YJUxKMowbuV ZY
aqANv54eoTViDMZecWRqoGlrWyY9S2NHQqew/mXU5IbHnL8SKtx21XSXCBt6wRyuAEB0DW4gKxAU
ylpWFhlqJqk7jEjTm53YqheYAUeCNpoKHclPeDNBnwQAo/5//9k=

------_=_NextPart_001_01C3845F.269FEFE2--


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users
Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 08:28 PM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0