[Dshield] Norton Internet Security 2003 - Invalid Log Lines

Wayne Larmon wlarmon at dshield.org
Sat Mar 1 02:31:18 GMT 2003


> These log lines look valid to me. Can anyone tell me why they are
> being rejected?

Because the Norton 2003 converter needed fixing.  It is fixed now.
http://www.dshield.org/windows_clients.php

Wayne Larmon
DShield.org

> ------------------------------------------------------------------
> ------------------------------------------------------
> 
> 2/28/2003 6:24:25 AM,Kevin,"This one time, the user has chosen to 
> ""block"" communications.","This one time, the user has chosen to 
> ""block"" communications. Inbound UDP packet Local 
> address,service is (testadler-i1(10.216.111.238),ms-sql-m(1434)) 
> Remote address,service is (61.177.64.125,1428) Process name is ""N/A"""
> 
> Not a valid log line for our purposes. 
> 
> ------------------------------------------------------------------
> ------------------------------------------------------
> 
> 2/28/2003 5:05:45 AM,Kevin,"This one time, the user has chosen to 
> ""block"" communications.","This one time, the user has chosen to 
> ""block"" communications. Inbound TCP connection Local 
> address,service is (testadler-i1(10.216.111.238),ms-sql-s(1433)) 
> Remote address,service is (61.11.22.89,2631) Process name is ""N/A"""
> 
> Not a valid log line for our purposes. 
> 
> ------------------------------------------------------------------
> ------------------------------------------------------
> 
> Thank you
> _______________________________________________
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see: 
> http://www.dshield.org/mailman/listinfo/list
> 



More information about the list mailing list