[Snort-users] Action while receive alerts

permalink · #1 (**permalink**) 08-11-2006

This is a multi-part message in MIME format.

--===============2109429477==
Content-Type: multipart/alternative;
boundary="----_=_NextPart_001_01C6BCEC.7B9CA6CC"
Content-class: urn:content-classes:message

This is a multi-part message in MIME format.

------_=_NextPart_001_01C6BCEC.7B9CA6CC
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hi all,

=20

May I know what is you all action while receiving alerts from your snort
server?

Did you patch accordingly to the servers being intruder?

=20

Let's have a scenario as below,

Example: While someone is trying to intrude to my server application
vulnerability which I already patched with latest patch.

1) Will I still receive snort alert? =20

=20

Thank You.....

=20

Regards,

Eugene

IT Security, OPUS/IT

03 - 27306653 (ext: 653)

=20

Data Classification: 2
[ 0-Public 1-Internal 2-Confidential (authorization required)
3-Strictly Confidential ]=20

This message is intended solely for the addressee. It is confidential
and may be legally privileged. Access to this message by anyone is
unauthorized. Unauthorized use is strictly prohibited and may be
unlawful. If you are not the intended recipient, any disclosure,
copying, or distribution of the message, or any action or omission taken
by you in reliance on it, except for the purpose of the delivery to the
addressee, is prohibited and may be unlawful. Any confidentiality or
privilege is not waived or lost because this mail has been sent to by
mistake.

=20

This e-mail and any attachments therewith are intended only for the use of =
the address. This e-mail may contain confidential and privileged informatio=
n. Any unauthorized use, copying or disclosure of information contained in=
this e-mail or its attachments is strictly prohibited and may be unlawful.=
If you have received this e-mail in error, please contact the sender via r=
eturn e-mail and delete this e-mail and attachments thereafter. Any confide=
ntiality or privilege is not waived or lost because this e-mail has been se=
nt to you by mistake. Any liability for viruses is excluded to the fullest =
extent permitted by law.

------_=_NextPart_001_01C6BCEC.7B9CA6CC
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:o=3D"urn:schemas-microsoft-com:office:office" xmlns:w=3D"urn:sc=
hemas-microsoft-com:office:word" xmlns:st1=3D"urn:schemas-microsoft-com:off=
ice:smarttags" xmlns=3D"http://www.w3.org/TR/REC-html40">

<head>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; charset=3Dus-ascii">
<meta name=3DGenerator content=3D"Microsoft Word 11 (filtered medium)">
<o:SmartTagType namespaceuri=3D"urn:schemas-microsoft-com:office:smarttags"
name=3D"City"/>
<o:SmartTagType namespaceuri=3D"urn:schemas-microsoft-com:office:smarttags"
name=3D"place"/>

<style>

</style>

</head>

<body lang=3DEN-US link=3Dblue vlink=3Dpurple>

<div class=3DSection1>

Hi all,<o:p></o:p>

<o:p> </o:p>

May I know what is you all action while receiving alerts
from your snort server?<o:p></o:p>

Did you patch accordingly to the servers being intruder?=
<o:p></o:p>

<o:p> </o:p>

Let’s have a scenario as below,<o:p></o:p><=
/font>

Example: While someone is trying to intrude to my server=
application
vulnerability which I already patched with latest patch.<o:p></o:p><=
/font>

1) Will I still receive snort alert?    &=
nbsp;       &nb sp;   &nbs=
p;            <o:p></o:p><=
/span>

<o:p> </o:p>

Thank =
You.....<o:p></o:p>

 <o:p></o:p>

Regard=
s,<o:p></o:p>

<st1:City w:st=3D"on"><st1:place w:st=3D"on">Eugene</st1:plac=
e></st1:City><o:p></o:p>

IT Sec=
urity,
OPUS/IT<o:p></o:p>

03 -
27306653 (ext: 653)<o:p></o:p>

 <o:p></o:p>

Data
Classification: 2 
[ 0-Public  1-Internal  2-Confidential (authorization required)&n=
bsp;
3-Strictly Confidential ] <o:p></o:p>

This message is intended solely for the
addressee. It is confidential and may be legally privileged. Access to this
message by anyone is unauthorized. Unauthorized use is strictly prohibited =
and
may be unlawful.  If you are not the intended recipient, any disclosur=
e,
copying, or distribution of the message, or any action or omission taken by=
you
in reliance on it, except for the purpose of the delivery to the addressee,=
is
prohibited and may be unlawful. Any confidentiality or privilege is not wai=
ved
or lost because this mail has been sent to by mistake.<fo=
nt
face=3D"Allianz Serif Light"><o:p></o:p>

<o:p> </o:p>

</div>

This e-mail and any a=
ttachments therewith are intended only for the use of the address. This e-m=
ail may contain confidential and privileged information. Any unauthorized u=
se, copying or disclosure of information contained in this e-mail or its a=
ttachments is strictly prohibited and may be unlawful. If you have received=
this e-mail in error, please contact the sender via return e-mail and dele=
te this e-mail and attachments thereafter. Any confidentiality or privilege=
is not waived or lost because this e-mail has been sent to you by mistake.=
Any liability for viruses is excluded to the fullest extent permitted by l=
aw.
 </bo=
dy>

</html>

------_=_NextPart_001_01C6BCEC.7B9CA6CC--

--===============2109429477==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=...057&dat=121642
--===============2109429477==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users
--===============2109429477==--

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode