All pastes #277165 Raw Edit

Mine

public text v1 · immutable
·published 2006-12-12 23:39 UTC
rendered paste body
sukko@blackstar src $ rm -f log.txt && sudo ./NetVMSnort -t 1> /dev/null
Logging to standard error
[00:32:18/log_setup] --- Log started at Wed, 13 Dec 2006 00:32:18 +0100 ---
[00:32:18/config_read] Opening configuration file "/home/sukko/gurtdoc/tesi/NetVMPositif/rules/snort.conf"
[00:32:18/nvm_setup] Setting up NetVM...
[00:32:18/pe_ethernet_config] Initing Ethernet PE...
[00:32:18/pe_ethernet_config] done!
[00:32:18/pe_ipv4_config] Initing IP PE...
[00:32:18/pe_ipv4_config] done!
[00:32:18/pe_tcp_config] Initing TCP PE...
[00:32:18/pe_tcp_config] done!
[00:32:18/pe_udp_config] Initing UDP PE...
[00:32:18/pe_udp_config] done!
[00:32:18/pe_icmp_config] Initing ICMP PE...
[00:32:18/pe_icmp_config] done!
[00:32:18/pe_dsize_config] Initing dsize PE...
[00:32:18/pe_dsize_config] done!
[00:32:18/pe_pmatch_config] Initing pattern matching PE (native)...
[00:32:18/bm_init] Using Turbo Boyer-Moore algorithm for string matching
[00:32:18/pe_pmatch_config] Pattern matching component setup took 0.000461 seconds
[00:32:18/pe_pmatch_config] done!
[00:32:18/pe_conntrack_config] Initing connection tracking PE...
[00:32:18/pe_conntrack_config] done!
[00:32:18/pe_ctmatch_config] Initing connection tracking match PE...
[00:32:18/ctmatch_rules_optimize] WARNING: Ignoring no_stream option for rule 8
[00:32:18/pe_ctmatch_config] done!
[00:32:18/nvm_setup] Done
[00:32:18/main] Capturing from interface lo
[00:32:47/ApplicationCallback] ---------------------------- Rule matched: 00000 ---------------------------
[00:32:47/ApplicationCallback] Snort rule ID...: 1624
[00:32:47/ApplicationCallback] Rule revision...: 6
[00:32:47/ApplicationCallback] Action..........: alert with message "FTP large PWD command"
[00:32:47/ApplicationCallback] ----------------------------------------------------------------------------
[00:33:02/ApplicationCallback] ---------------------------- Rule matched: 00002 ---------------------------
[00:33:02/ApplicationCallback] Snort rule ID...: 2125
[00:33:02/ApplicationCallback] Rule revision...: 8
[00:33:02/ApplicationCallback] Action..........: alert with message "FTP CWD Root directory transversal attempt"
[00:33:02/ApplicationCallback] ----------------------------------------------------------------------------
[00:33:27/sighandler] WARNING: Received signal 2!
[00:33:27/main] Done processing packets - Quitting
[00:33:27/log_close] --- Log closed at Wed, 13 Dec 2006 00:33:27 +0100 ---