![[Silicon Defense logo]](../SDlogo.gif)
|
SnortSnarf signature pageDNS zone transfer UDP :SnortSnarf v020516.1 |
| Signature section (54) | Top 20 source IPs | Top 20 dest IPs |
2 alerts with this signature using input module SnortFileInput, with sources:
Earliest such alert at 18:28:06 on 7/23/2005
Latest such alert at 20:07:08 on 7/23/2005
| DNS zone transfer UDP : | 2 sources | 1 destinations |
| Priority: 2 | Classification: Attempted Information Leak | |
| [sid:1948] | ||
| Source | # Alerts (sig) | # Alerts (total) | # Dsts (sig) | # Dsts (total) |
| 202.12.29.60 | 1 | 1 | 1 | 1 |
| 209.133.23.151 | 1 | 1 | 1 | 1 |
| Destinations | # Alerts (sig) | # Alerts (total) | # Srcs (sig) | # Srcs (total) |
| 192.168.1.2 | 2 | 18 | 2 | 8 |