[298] in WWW Security List Archive
Firewall Log Attack Signatures.
daemon@ATHENA.MIT.EDU (Frank R. Swift (510) 422-1463)
Sat Jan 14 03:08:41 1995
Date: Fri, 13 Jan 1995 15:09:12 -0800
To: www-security@ns1.rutgers.edu
From: uncl@llnl.gov (Frank R. Swift (510) 422-1463)
Cc: adamsb@un.org, uncl@llnl.gov, frank_swift@quickmail.llnl.gov
Reply-To: www-security@ns2.rutgers.edu
Since the purpose of this list is intended for the discussion of World Wide
Web security proposals, enhancements and issues. I have an issue that I
needs discussion: Firewall Log Attack Signatures.
Does anyone have a list of common firewall log entries that show that a
firewall is being attacked, and what kind of attack the log entries
represent?
If so, I would be grateful if you could e-mail a copy to me at
adamsb@un.org.
Posting the log entries on the list might not be appropriate, as the
alt.2600/#Hack FAQ recommends that crackers subscribe to this list.
My best to the Hog Farmer.
frank
,,,,
(. .)
+---------------------o00-( _ )-00o---------------------------------+
\ | /
| 0 0 | Frank Swift L-321 (510)-422-1463
~^~ LLNL 7000 East Avenue ( fax) 423-0913
\O/ Livermore CA 94550-9516_____________uncl@llnl.gov________+
THE WORLD IS NOT INTERESTED IN THE STORMS YOU ENCOUNTERED,
BUT WHETHER YOU BROUGHT IN THE SHIP .
Hi! I'm a .signature virus!
"To poldly bow air mobius gumby four" - Trekee on novocaine
