Snort Log

Printable View

March 24th, 2005, 04:35 PM
DemonicKn1ght

Snort Log

Toss up between Newbie Discusion and this, but I figure Horsey or smart people will look here first ^_^. I was thumbing through my log file (I print it out ;), actually I'm using Sawmill) and I keep getting these empty entries.

Quote:

23/Mar/2005 21:50:55 (empty) (empty) (empty) (empty) (empty) (empty) (empty) (empty) (empty)

Any idea why those are occuring? The other thing is I'm getting weird hits from my own IP.

Quote:

23/Mar/2005 21:23:52 192.168.1.XXX XXX.255.XXX.XXX 1051 1900 Detection of a Network Scan 3 UDP SCAN UPnP service discover attempt (empty)

Any ideas why those occur as well?
March 24th, 2005, 04:56 PM
zENGER

Do you have MSN/Windows messenger active on the machine? I was getting the same hits as the bottom on because of it.
March 24th, 2005, 04:59 PM
DemonicKn1ght

Quote:

Do you have MSN/Windows messenger active on the machine? I was getting the same hits as the bottom on because of it.

Yah. I'll try turning that off/disabling it (although I thought I already did... idiot me). Thanks.