Re: [Snort-users] Snort/Logsnorter/PureSecure Cisco ACL's
This is a discussion on Re: [Snort-users] Snort/Logsnorter/PureSecure Cisco ACL's within the Snort forums, part of the System Security and Security Related category; At the very least, it means that the clock on the cisco box is not ntp = synced, and therefore you ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
11-17-2003
|
|||
|
|||
Re: [Snort-users] Snort/Logsnorter/PureSecure Cisco ACL's
At the very least, it means that the clock on the cisco box is not ntp =
synced, and therefore you cannot trust it: see the *Nov 12 00:09:21? (its the '*') : Nov 12 > 00:11:03 c4700 3062: *Nov 12 00:09:21 EST: %SEC-6-IPACCESSLOGP: list = 185 denied > tcp XX.XX.XXX.XXX(52076) -> YY.YY.YYY.YYY(135), 2 packets >=20 --=20 Michael Scheidell SECNAP Network Security 561-368-9561 x 1131 www.secnap.com=20 ------------------------------------------------------- This SF. Net email is sponsored by: GoToMyPC GoToMyPC is the fast, easy and secure way to access your computer from any Web browser or wireless device. Click here to Try it Free! https://www.gotomypc.com/tr/OSDN/AW/...=mm/g22lp.tmpl _______________________________________________ Snort-users mailing list Snort-users@lists.sourceforge.net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/...fo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.p...st=snort-users 
|
Linear Mode
