[Silicon Defense logo]

SnortSnarf alert page

Destination: 129.137.3.5

SnortSnarf v021111.1

Signature section (91123)Top 20 source IPsTop 20 dest IPs

8 such alerts found using input module SnortFileInput, with sources:
Earliest: 23:02:22.470390 on 06/01/2003
Latest: 23:16:22.785425 on 06/01/2003

1 different signatures are present for 129.137.3.5 as a destination

There are 1 distinct source IPs in the alerts of the type on this page.

129.137.3.5 Whois lookup at: ARIN RIPE APNIC Geektools
DNS lookup at: Amenesi TRIUMF Princeton
More lookup links: Dshield Sam Spade

[**] [116:97:1] (snort_decoder): Short UDP packet, length field > payload length [**]
06/01-23:02:22.470390 192.168.1.105:0 -> 129.137.3.5:0
UDP TTL:128 TOS:0x0 ID:520 IpLen:20 DgmLen:108
Len: 9992
[**] [116:97:1] (snort_decoder): Short UDP packet, length field > payload length [**]
06/01-23:02:22.477803 192.168.1.105:0 -> 129.137.3.5:0
UDP TTL:128 TOS:0x0 ID:521 IpLen:20 DgmLen:108
Len: 9992
[**] [116:97:1] (snort_decoder): Short UDP packet, length field > payload length [**]
06/01-23:02:23.054967 192.168.1.105:0 -> 129.137.3.5:0
UDP TTL:128 TOS:0x0 ID:528 IpLen:20 DgmLen:108
Len: 9992
[**] [116:97:1] (snort_decoder): Short UDP packet, length field > payload length [**]
06/01-23:02:34.028602 192.168.1.105:0 -> 129.137.3.5:0
UDP TTL:128 TOS:0x0 ID:533 IpLen:20 DgmLen:108
Len: 9992
[**] [116:97:1] (snort_decoder): Short UDP packet, length field > payload length [**]
06/01-23:02:34.041253 192.168.1.105:0 -> 129.137.3.5:0
UDP TTL:128 TOS:0x0 ID:536 IpLen:20 DgmLen:108
Len: 9992
[**] [116:97:1] (snort_decoder): Short UDP packet, length field > payload length [**]
06/01-23:02:34.569100 192.168.1.105:0 -> 129.137.3.5:0
UDP TTL:128 TOS:0x0 ID:540 IpLen:20 DgmLen:108
Len: 9992
[**] [116:97:1] (snort_decoder): Short UDP packet, length field > payload length [**]
06/01-23:16:21.803592 192.168.1.105:0 -> 129.137.3.5:0
UDP TTL:128 TOS:0x0 ID:691 IpLen:20 DgmLen:108
Len: 9992
[**] [116:97:1] (snort_decoder): Short UDP packet, length field > payload length [**]
06/01-23:16:22.785425 192.168.1.105:0 -> 129.137.3.5:0
UDP TTL:128 TOS:0x0 ID:697 IpLen:20 DgmLen:108
Len: 9992
SnortSnarf brought to you courtesy of Silicon Defense
Authors: Jim Hoagland and Stuart Staniford
See also the Snort Page by Marty Roesch
Page generated at Tue Jun 17 09:09:29 2003