Thread: Snort alarms
View Single Post
  #1  
Old 04-18-2007, 10:47 PM
quwax quwax is offline
Registered User
 
Join Date: Apr 2007
Posts: 17
Snort alarms

Hello,
while the back up through SuperDuper! from my Powerbook to a disimage on the server is running I get a lot of Snort Warnings like this:
"WEB-MISC cat%20 access"
"WEB-MISC WebDAV search access"
"WEB-MISC /etc/passwd"
"WEB-MISC cross site scripting attempt"
etc.
in the log from SuperDuper! i havbe these entries for the time in question:
11:19:29 PM | Info | /Users
| 11:37:02 PM | Info | /usr
| 11:38:39 PM | Info | /dev
| 11:38:39 PM | Info | /Volumes
| 11:38:39 PM | Info | Ignoring /Volumes/xxx_Bu
| 11:38:39 PM | Info | Ignoring /Volumes/HD_xxx
| 11:38:39 PM | Info | Ignoring /Volumes/bbb
| 11:38:39 PM | Info | Ignoring /Volumes/dddd
| 11:38:39 PM | Info | Ignoring /Volumes/BU_xxxSys
| 11:38:39 PM | Info | Ignoring /Volumes/ccc
| 11:38:39 PM | Info | Ignoring /Volumes/Sys_BaU
| 11:38:39 PM | Info | Ignoring /Volumes/xxxSystem
| 11:38:39 PM | Info | Ignoring /Volumes/HD_System

any idea how can I stop these warnings?

Thanks
Q.
Reply With Quote