Re: [tlug] Strange httpd and TCP/135 logs...

[Edward Middleton <edwardmiddleton@example.com>]

On Thu, 2003-08-28 at 21:33, Bruno Raoult wrote:
> My questions:
> Did you experience this yourself?
> Do you have an idea of what it could be?

I can't really answer either of these questions but I can make a
suggestion.  Run snort or some other IDS it might not be able to give
you the answer but it may give you a lot more information.  You could
also ask on the snort users mailing list.

http://www.snort.org/
http://www.snort.org/lists.html

Edward Middleton