|
|
Re: WEB-MISC SSLv3 invalid Client_Hello attempt: msg#00202security.ids.snort.sigs
On Thu, Oct 14, 2004 at 10:29:14AM -0400, Brian wrote: > Can you send pcap of one of the alerts going off? There are > still a few quirks of SSL that I havn't nailed down in the > rules yet. Generated by ACID v0.9.6b20-5.1 on Fri, 15 Oct 2004 11:32:48 +0400 IP addresses excluded. ------------------------------------------------------------------------------ #(1 - 119149) [2004-10-15 11:30:32.752] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=126 ID=25617 flags=0 offset=0 TTL=122 chksum=27890 TCP: port=1345 -> dport: 443 flags=***AP*** seq=8294168 ack=2839106307 off=5 res=0 win=8760 urp=0 chksum=20993 Payload: length = 86 000 : 16 03 00 00 51 01 00 00 4D 03 00 61 36 27 A3 A6 ....Q...M..a6'.. 010 : 60 CE 80 17 6D 8C 1A BC 50 0F 0F 6A D4 5F B6 A7 `...m...P..j._.. 020 : 77 20 20 E2 91 F5 5C 04 35 83 8B 20 95 1D 44 43 w ...\.5.. ..DC 030 : 29 DF 4F E7 A0 DB B5 6D 57 36 0B 99 96 E9 46 5F ).O....mW6....F_ 040 : CD 9F CD F8 B7 39 52 AF 4F 6E 70 E1 00 06 00 03 .....9R.Onp..... 050 : 00 08 00 06 01 00 ...... ------------------------------------------------------------------------------ #(1 - 119148) [2004-10-15 11:30:17.536] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=126 ID=21521 flags=0 offset=0 TTL=122 chksum=31986 TCP: port=1344 -> dport: 443 flags=***AP*** seq=8279061 ack=2819379025 off=5 res=0 win=8760 urp=0 chksum=57833 Payload: length = 86 000 : 16 03 00 00 51 01 00 00 4D 03 00 00 8F 86 E9 73 ....Q...M......s 010 : 06 D4 DC F0 32 66 08 F1 19 5B 65 F4 16 0C 15 BC ....2f...[e..... 020 : 5B BB 89 8E 3B F2 83 35 54 B8 E8 20 95 1D 44 43 [...;..5T.. ..DC 030 : 29 DF 4F E7 A0 DB B5 6D 57 36 0B 99 96 E9 46 5F ).O....mW6....F_ 040 : CD 9F CD F8 B7 39 52 AF 4F 6E 70 E1 00 06 00 03 .....9R.Onp..... 050 : 00 08 00 06 01 00 ...... ------------------------------------------------------------------------------ #(1 - 119147) [2004-10-15 11:30:05.722] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=5304 flags=0 offset=0 TTL=119 chksum=17422 TCP: port=64984 -> dport: 443 flags=***AP*** seq=115778076 ack=2801187423 off=5 res=0 win=64240 urp=0 chksum=33281 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 3F 8D 92 A3 85 ....a...]..?.... 010 : DD 10 A9 09 53 8A 23 85 31 7F 0A 50 03 20 F7 0D ....S.#.1.P. .. 020 : 72 5E ED BC 6C E4 15 F2 55 B6 C7 20 4B 59 D0 1A r^..l...U.. KY.. 030 : 3C D0 F0 77 86 2B DD F5 78 D6 CD ED 39 92 97 85 <..w.+..x...9... 040 : 5D 05 97 13 8F 15 73 83 2B 2E 5C 71 00 16 00 04 ].....s.+.\q.... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119146) [2004-10-15 11:29:26.862] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=3657 flags=0 offset=0 TTL=123 chksum=30760 TCP: port=1354 -> dport: 443 flags=***AP*** seq=1016207883 ack=2758754757 off=5 res=0 win=8760 urp=0 chksum=39896 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7C 58 27 ....a...]..Ao|X' 010 : BD F1 B7 34 4A C8 03 D6 47 6A 26 95 44 A6 FF 9B ...4J...Gj&.D... 020 : 6D 5C 49 B2 61 23 91 A1 AC D3 3D 20 4A 7B 5F 5E m\I.a#....= J{_^ 030 : ED 8B 51 17 37 81 64 CB 0C 67 E0 CD 2B 2E FE E1 ..Q.7.d..g..+... 040 : EA 2B DA FB 5D A6 FB 5B 6C 32 65 D7 00 16 00 04 .+..]..[l2e..... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119145) [2004-10-15 11:28:33.22] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=19967 flags=0 offset=0 TTL=121 chksum=27512 TCP: port=3087 -> dport: 443 flags=***AP*** seq=3722455519 ack=2707297973 off=5 res=0 win=64800 urp=0 chksum=28655 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7C 34 53 ....a...]..Ao|4S 010 : 64 22 27 D0 8F 3B A2 29 5C 37 49 66 85 60 4A DB d"'..;.)\7If.`J. 020 : 6E 2B 0A E9 DE 41 DC 49 D6 E0 E4 20 0E 14 33 70 n+...A.I... ..3p 030 : 7E 91 FB B2 B1 7E 95 9C BB CC A2 89 D2 C2 61 7B ~....~........a{ 040 : 19 16 BB 56 9A C4 91 13 62 FC 97 97 00 16 00 04 ...V....b....... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119144) [2004-10-15 11:28:22.892] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=2382 flags=0 offset=0 TTL=123 chksum=31749 TCP: port=1260 -> dport: 443 flags=***AP*** seq=457521953 ack=2694313660 off=5 res=0 win=8760 urp=0 chksum=9196 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7B 24 73 ....a...]..Ao{$s 010 : D1 14 DF 2D 23 42 F1 BE BD A6 DA 04 48 60 65 64 ...-#B......H`ed 020 : 9B 22 7E F6 6F AE 8B CE AB BB E0 20 2F 81 BC 80 ."~.o...... /... 030 : 31 46 3C F8 15 59 B8 15 44 74 FF 0B 19 93 53 2D 1F<..Y..Dt....S- 040 : 80 06 E3 6E 6F FE F4 91 3B 2C 08 C1 00 16 00 04 ...no...;,...... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119143) [2004-10-15 11:28:07.413] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=3031 flags=0 offset=0 TTL=123 chksum=32123 TCP: port=1223 -> dport: 443 flags=***AP*** seq=1980075830 ack=2664437622 off=5 res=0 win=8760 urp=0 chksum=21321 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7C 8E 3D ....a...]..Ao|.= 010 : E4 9B 0A 27 E7 29 07 91 8B 84 A5 8A FB DC 86 2E ...'.).......... 020 : 21 52 83 5E 13 65 F0 22 F9 4D D3 20 73 49 73 C4 !R.^.e.".M. sIs. 030 : 33 02 21 05 DD E2 B8 DF 36 76 16 E9 EA 1B EE 65 3.!.....6v.....e 040 : 8B 2B 66 A9 E7 96 94 E9 4F 81 72 6D 00 16 00 04 .+f.....O.rm.... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119141) [2004-10-15 11:26:24.976] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=17296 flags=0 offset=0 TTL=121 chksum=30183 TCP: port=4929 -> dport: 443 flags=***AP*** seq=3611827120 ack=2580873775 off=5 res=0 win=64800 urp=0 chksum=65479 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7B B3 E0 ....a...]..Ao{.. 010 : 61 BC 49 EF DA 1E A0 91 DC 7B 0C 2A B1 4F 77 3C a.I......{.*.Ow< 020 : AD 45 E9 E0 D8 AE 95 57 4D 8A C5 20 30 76 6E B4 .E.....WM.. 0vn. 030 : 12 49 C1 EA D2 8D 82 73 8E 42 5C 42 37 F6 A1 C4 .I.....s.B\B7... 040 : D0 C2 0F 85 7A DB 7F 2D A7 2A 6E E2 00 16 00 04 ....z.-.*n..... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119140) [2004-10-15 11:26:07.858] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=166 flags=0 offset=0 TTL=123 chksum=34612 TCP: port=1051 -> dport: 443 flags=***AP*** seq=1039145078 ack=2566746247 off=5 res=0 win=8760 urp=0 chksum=44267 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7B 62 A9 ....a...]..Ao{b. 010 : 0C 51 64 2F F2 E6 06 78 8F 9E D4 A5 0A 8D ED 04 .Qd/...x........ 020 : FB AA 0E F2 2A 04 1C 5F A9 EB A3 20 F3 BD A5 D0 ....*.._... .... 030 : 2B 34 9F 6E B2 CC 51 5C 74 33 D8 74 4B 5F CB 0A +4.n..Q\t3.tK_.. 040 : 9A FD 36 22 38 13 57 2F 18 31 B2 38 00 16 00 04 ..6"8.W/.1.8.... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119139) [2004-10-15 11:26:04.033] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=156 flags=0 offset=0 TTL=123 chksum=34622 TCP: port=1050 -> dport: 443 flags=***AP*** seq=1038424144 ack=2559717113 off=5 res=0 win=8760 urp=0 chksum=38115 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7B 5F 68 ....a...]..Ao{_h 010 : C2 95 89 7A 86 C5 78 0B 23 BB B0 FC AD 94 6E A1 ...z..x.#.....n. 020 : A5 28 88 FF 99 A2 CC 92 56 E9 9A 20 F3 BD A5 D0 .(......V.. .... 030 : 2B 34 9F 6E B2 CC 51 5C 74 33 D8 74 4B 5F CB 0A +4.n..Q\t3.tK_.. 040 : 9A FD 36 22 38 13 57 2F 18 31 B2 38 00 16 00 04 ..6"8.W/.1.8.... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119138) [2004-10-15 11:25:59.373] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=134 flags=0 offset=0 TTL=123 chksum=34644 TCP: port=1049 -> dport: 443 flags=***AP*** seq=1036364921 ack=2544091776 off=5 res=0 win=8760 urp=0 chksum=30404 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7B 5A 8E ....a...]..Ao{Z. 010 : AC 4D 14 7B 89 8A 4C 1F 8C 30 BD BB 0C BA DC 59 .M.{..L..0.....Y 020 : B3 F9 19 E3 4B 5D F4 90 6C 30 7A 20 F3 BD A5 D0 ....K]..l0z .... 030 : 2B 34 9F 6E B2 CC 51 5C 74 33 D8 74 4B 5F CB 0A +4.n..Q\t3.tK_.. 040 : 9A FD 36 22 38 13 57 2F 18 31 B2 38 00 16 00 04 ..6"8.W/.1.8.... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119137) [2004-10-15 11:25:59.213] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=131 flags=0 offset=0 TTL=123 chksum=34647 TCP: port=1048 -> dport: 443 flags=***AP*** seq=1036291545 ack=2548151811 off=5 res=0 win=8760 urp=0 chksum=4648 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7B 5A 70 ....a...]..Ao{Zp 010 : F5 DD 23 07 FC 32 3F F6 A0 B4 61 63 19 1F BC A4 ..#..2?...ac.... 020 : 24 51 2C 1C 30 07 15 43 1E 68 6C 20 F3 BD A5 D0 $Q,.0..C.hl .... 030 : 2B 34 9F 6E B2 CC 51 5C 74 33 D8 74 4B 5F CB 0A +4.n..Q\t3.tK_.. 040 : 9A FD 36 22 38 13 57 2F 18 31 B2 38 00 16 00 04 ..6"8.W/.1.8.... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119136) [2004-10-15 11:25:51.399] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=114 flags=0 offset=0 TTL=123 chksum=34664 TCP: port=1047 -> dport: 443 flags=***AP*** seq=1035072542 ack=2540158331 off=5 res=0 win=8760 urp=0 chksum=44370 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7B 52 FF ....a...]..Ao{R. 010 : F9 EE 0F 7A 16 D3 97 70 F2 14 6C 19 D5 E0 72 E6 ...z...p..l...r. 020 : C6 67 E4 34 31 78 66 D2 AE 96 FC 20 F3 BD A5 D0 .g.41xf.... .... 030 : 2B 34 9F 6E B2 CC 51 5C 74 33 D8 74 4B 5F CB 0A +4.n..Q\t3.tK_.. 040 : 9A FD 36 22 38 13 57 2F 18 31 B2 38 00 16 00 04 ..6"8.W/.1.8.... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119135) [2004-10-15 11:25:42.339] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=73 flags=0 offset=0 TTL=123 chksum=34705 TCP: port=1044 -> dport: 443 flags=***AP*** seq=1032590119 ack=2542052963 off=5 res=0 win=8760 urp=0 chksum=55473 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7B 49 4A ....a...]..Ao{IJ 010 : A3 BE BA B2 16 B6 23 42 E7 1A 16 FF 8F 22 58 F8 ......#B....."X. 020 : EF 77 0A 12 04 80 BD 65 48 83 A0 20 F3 BD A5 D0 .w.....eH.. .... 030 : 2B 34 9F 6E B2 CC 51 5C 74 33 D8 74 4B 5F CB 0A +4.n..Q\t3.tK_.. 040 : 9A FD 36 22 38 13 57 2F 18 31 B2 38 00 16 00 04 ..6"8.W/.1.8.... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119134) [2004-10-15 11:25:41.60] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=67 flags=0 offset=0 TTL=123 chksum=34711 TCP: port=1041 -> dport: 443 flags=***AP*** seq=1031597765 ack=2529990611 off=5 res=0 win=8760 urp=0 chksum=31514 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7B 45 BB ....a...]..Ao{E. 010 : 9D E8 6A D0 B3 86 D2 45 C3 08 21 09 1F F4 41 A9 ..j....E..!...A. 020 : 57 EF 93 0E 95 AE 99 27 AF 6B 1A 20 F3 BD A5 D0 W......'.k. .... 030 : 2B 34 9F 6E B2 CC 51 5C 74 33 D8 74 4B 5F CB 0A +4.n..Q\t3.tK_.. 040 : 9A FD 36 22 38 13 57 2F 18 31 B2 38 00 16 00 04 ..6"8.W/.1.8.... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119133) [2004-10-15 11:25:39.059] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=55 flags=0 offset=0 TTL=123 chksum=34723 TCP: port=1043 -> dport: 443 flags=***AP*** seq=1031748742 ack=2529969000 off=5 res=0 win=8760 urp=0 chksum=48705 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7B 45 D3 ....a...]..Ao{E. 010 : 7B E1 4B 77 DE 5A E6 DC DD BF 1E 85 8E CA 2A 8C {.Kw.Z........*. 020 : 4E DC 6E E3 0F AE 70 01 F6 3F 05 20 F3 BD A5 D0 N.n...p..?. .... 030 : 2B 34 9F 6E B2 CC 51 5C 74 33 D8 74 4B 5F CB 0A +4.n..Q\t3.tK_.. 040 : 9A FD 36 22 38 13 57 2F 18 31 B2 38 00 16 00 04 ..6"8.W/.1.8.... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119132) [2004-10-15 11:25:38.985] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=52 flags=0 offset=0 TTL=123 chksum=34726 TCP: port=1042 -> dport: 443 flags=***AP*** seq=1031688152 ack=2526850580 off=5 res=0 win=8760 urp=0 chksum=50844 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7B 45 79 ....a...]..Ao{Ey 010 : 93 2A 20 E6 7A DE 5A 86 F6 FA A2 25 B7 35 4C CB .* .z.Z....%.5L. 020 : D5 84 21 37 93 15 D1 B3 EA F0 88 20 F3 BD A5 D0 ..!7....... .... 030 : 2B 34 9F 6E B2 CC 51 5C 74 33 D8 74 4B 5F CB 0A +4.n..Q\t3.tK_.. 040 : 9A FD 36 22 38 13 57 2F 18 31 B2 38 00 16 00 04 ..6"8.W/.1.8.... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119131) [2004-10-15 11:25:37.219] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=2691 flags=0 offset=0 TTL=123 chksum=32232 TCP: port=1263 -> dport: 443 flags=***AP*** seq=2792626041 ack=2513686800 off=5 res=0 win=8760 urp=0 chksum=43541 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7B F2 4F ....a...]..Ao{.O 010 : 77 1E 00 99 29 EA 90 EC 44 30 3D 90 D4 17 B4 C9 w...)...D0=..... 020 : C4 4E 27 34 60 C3 B0 AC D4 40 6D 20 33 10 08 28 .N'4`....@m 3..( 030 : CE 81 BA 6E 61 1C 7F 13 3C AB 0D 65 49 CC EA 03 ...na..<..eI... 040 : CD F5 7B DA B5 54 69 B7 48 6F B8 F7 00 16 00 04 ..{..Ti.Ho...... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119130) [2004-10-15 11:25:37.039] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=2689 flags=0 offset=0 TTL=123 chksum=32234 TCP: port=1263 -> dport: 443 flags=***AP*** seq=2792626041 ack=2513686800 off=5 res=0 win=8760 urp=0 chksum=43541 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7B F2 4F ....a...]..Ao{.O 010 : 77 1E 00 99 29 EA 90 EC 44 30 3D 90 D4 17 B4 C9 w...)...D0=..... 020 : C4 4E 27 34 60 C3 B0 AC D4 40 6D 20 33 10 08 28 .N'4`....@m 3..( 030 : CE 81 BA 6E 61 1C 7F 13 3C AB 0D 65 49 CC EA 03 ...na..<..eI... 040 : CD F5 7B DA B5 54 69 B7 48 6F B8 F7 00 16 00 04 ..{..Ti.Ho...... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119129) [2004-10-15 11:25:34.68] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=33 flags=0 offset=0 TTL=123 chksum=34745 TCP: port=1040 -> dport: 443 flags=***AP*** seq=1030285171 ack=2527166999 off=5 res=0 win=8760 urp=0 chksum=34721 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7B 41 8D ....a...]..Ao{A. 010 : 16 C4 14 66 8A 1E EA 0C 92 2D 66 2B BE 49 CB 5B ...f.....-f+.I.[ 020 : E8 BF A8 E9 AC 1F B9 4B 28 00 8C 20 F3 BD A5 D0 .......K(.. .... 030 : 2B 34 9F 6E B2 CC 51 5C 74 33 D8 74 4B 5F CB 0A +4.n..Q\t3.tK_.. 040 : 9A FD 36 22 38 13 57 2F 18 31 B2 38 00 16 00 04 ..6"8.W/.1.8.... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119127) [2004-10-15 11:24:04.762] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=16 dlen=717 ID=0 flags=0 offset=0 TTL=240 chksum=0 TCP: port=1433 -> dport: 443 flags=***AP*** seq=2417737489 ack=3503197000 off=5 res=0 win=6432 urp=0 chksum=0 Payload: length = 677 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7B 27 A9 ....a...]..Ao{'. 010 : 7D 42 9C 7F 49 FB EF BA EF A1 D4 23 2F 4C A9 82 }B.I......#/L.. 020 : A3 00 AD 2A 0E A7 1A 47 BB 54 B9 20 30 76 6E B4 ...*...G.T. 0vn. 030 : 12 49 C1 EA D2 8D 82 73 8E 42 5C 42 37 F6 A1 C4 .I.....s.B\B7... 040 : D0 C2 0F 85 7A DB 7F 2D A7 2A 6E E2 00 16 00 04 ....z.-.*n..... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 14 03 00 00 01 01 16 03 00 00 ...c............ 070 : 38 3E 99 D2 30 41 4A B2 E0 EB BA 9B 33 2C 69 CC 8>..0AJ.....3,i. 080 : A8 C1 05 9A AB 6B 04 C0 C9 A2 DC 40 8F 7C C1 40 .....k.....@.|.@ 090 : B4 2A D8 79 09 43 81 10 B6 7A 0B 02 E7 AA 1A DC .*.y.C...z...... 0a0 : C3 98 B0 ED 22 1A ED 30 98 17 03 00 01 F7 53 53 ...."..0......SS 0b0 : 38 50 5B 0F 44 D3 6D C3 6C C0 58 38 A6 12 6F 54 8P[.D.m.l.X8..oT 0c0 : 19 C0 A8 E6 BC E6 63 31 7D CA 9C DB 45 D0 D8 2D ......c1}...E..- 0d0 : 9A 53 E5 1E 82 DA FA 87 DE 8D 22 BB 7F BC E6 6E .S........"...n 0e0 : 15 77 9A 94 11 A6 F9 23 D0 EC 09 AC B1 63 CB 0C .w.....#.....c.. 0f0 : 25 B6 D1 0D 35 88 67 84 0A 7C 1C 39 65 4E 23 0A %...5.g..|.9eN#. 100 : 30 B2 E8 A6 03 9A 21 9E 9F E5 72 BD CF EF 0A 7E 0.....!...r....~ 110 : F3 0E F9 F3 39 F3 EF 7E 21 F8 74 18 43 F4 61 7F ....9..~!.t.C.a 120 : 99 48 78 6E 19 21 D7 66 B1 87 79 5D 1D 23 1D 25 .Hxn.!.f..y].#.% 130 : 9F E4 3A AB 21 BA 56 82 E0 D0 C6 98 09 95 F1 8F ..:.!.V......... 140 : 33 18 18 E7 8F AB 76 56 79 99 98 6D 5D 48 22 07 3.....vVy..m]H". 150 : 93 42 32 E2 BE F7 8B 3B E0 1B 48 77 4F D8 C8 41 .B2....;..HwO..A 160 : 37 D3 02 5B 6B 30 0F 51 DA 23 15 3F 41 8E 71 B6 7..[k0.Q.#.?A.q. 170 : 67 40 67 B6 31 9B E9 2D 58 67 89 97 4D 9E 5A 6A g@xxxxxxxxxxxxxx 180 : 1C F1 AA F7 26 3A 35 4C 51 A9 40 8C DF B8 5A 2A ....&:5LQ.@...Z* 190 : 00 83 90 DF BE 22 AC C3 1C 49 BA 66 F1 97 C4 E8 ....."...I.f.... 1a0 : 35 4E 10 25 5B 5E 8D 14 15 2A C7 21 47 49 34 82 5N.%[^...*.!GI4. 1b0 : 80 B9 57 6E 91 51 DD 66 65 48 61 23 F5 03 EA C1 ..Wn.Q.feHa#.... 1c0 : 55 A2 2D 93 81 0E 6F F3 06 5B F1 14 31 5E C9 D2 U.-...o..[..1^.. 1d0 : 03 D3 CF F1 1B 9A 8F 36 77 C5 C8 A0 75 05 6E 96 .......6w...u.n. 1e0 : 82 5C AC 9D B5 27 C1 72 75 46 98 BB 3B B6 CB 53 .\...'.ruF..;..S 1f0 : B4 28 A8 74 9D 89 5C FF 5C 48 65 C6 B1 35 68 28 .(.t..\.\He..5h( 200 : A4 83 3B 08 02 B0 78 BB 4E 10 2D 50 3D B2 BA 46 ..;...x.N.-P=..F 210 : 16 F5 FD 84 56 5E E4 97 93 32 81 88 BD 2C EC 2A ....V^...2...,.* 220 : AA 02 E2 CF 5D 60 2E F7 63 5D 04 EC 9A 76 EC FD ....]`..c]...v.. 230 : C1 33 BC 94 35 80 DB 2F C7 C2 DE 45 94 40 03 62 .3..5../...E.@.b 240 : A4 67 AF F7 92 6A 1A C8 DC 27 05 B3 BB 9A 54 BB .g...j...'....T. 250 : 31 B4 AE E5 6D B5 15 EA 97 C5 66 58 85 BB CA 79 1...m.....fX...y 260 : AE 89 68 2C 5B 41 C0 DE B2 15 7E 9B E4 2E 7F E2 ..h,[A....~.... 270 : CF 1C 9E 55 A8 5F 54 77 FD 8D A3 6D 93 CF 65 62 ...U._Tw...m..eb 280 : C8 15 CB 56 E8 2A 54 1B 5C 89 89 9C 86 36 D0 B2 ...V.*T.\....6.. 290 : 5A 28 33 CC 1A F1 86 9E FF 79 DE C1 E3 B2 DF D3 Z(3......y...... 2a0 : D7 C0 D6 79 D2 ...y. ------------------------------------------------------------------------------ #(1 - 119126) [2004-10-15 11:23:55.937] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=14448 flags=0 offset=0 TTL=121 chksum=33031 TCP: port=1145 -> dport: 443 flags=***AP*** seq=3498713641 ack=2406062152 off=5 res=0 win=64800 urp=0 chksum=26976 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7B 1E FB ....a...]..Ao{.. 010 : A8 47 50 2D 64 D8 F9 4A 1C 05 FC CE 12 2F 04 F4 .GP-d..J...../.. 020 : 3C 93 35 58 1E 44 44 53 D6 DF CC 20 30 76 6E B4 <.5X.DDS... 0vn. 030 : 12 49 C1 EA D2 8D 82 73 8E 42 5C 42 37 F6 A1 C4 .I.....s.B\B7... 040 : D0 C2 0F 85 7A DB 7F 2D A7 2A 6E E2 00 16 00 04 ....z.-.*n..... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119125) [2004-10-15 11:22:55.452] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=13275 flags=0 offset=0 TTL=119 chksum=26117 TCP: port=62123 -> dport: 443 flags=***AP*** seq=1209988156 ack=2354868177 off=5 res=0 win=17680 urp=0 chksum=62730 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7A 95 12 ....a...]..Aoz.. 010 : AF 32 AC 00 EE EA A7 74 6F 52 78 BC C6 AA 22 C7 .2.....toRx...". 020 : 7F 13 88 EA 3A 34 01 9C 0E F3 6F 20 2E 32 9B F2 ...:4....o .2.. 030 : 47 09 8F 03 C3 B2 23 0F 0F 89 6B 18 7B 78 6B 1F G.....#...k.{xk. 040 : AA 9E AE F8 28 AD CD E3 8A FB BB 2C 00 16 00 04 ....(......,.... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119124) [2004-10-15 11:22:15.507] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=11973 flags=0 offset=0 TTL=121 chksum=35506 TCP: port=4846 -> dport: 443 flags=***AP*** seq=3395467952 ack=2320141145 off=5 res=0 win=64800 urp=0 chksum=35569 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7A BA 38 ....a...]..Aoz.8 010 : A5 FD AD 0A 1C 36 60 D3 CB B4 82 7E DE 9F 90 90 .....6`....~.... 020 : CD 17 BD D5 69 17 2D 25 D3 BE 30 20 30 76 6E B4 ....i.-%..0 0vn. 030 : 12 49 C1 EA D2 8D 82 73 8E 42 5C 42 37 F6 A1 C4 .I.....s.B\B7... 040 : D0 C2 0F 85 7A DB 7F 2D A7 2A 6E E2 00 16 00 04 ....z.-.*n..... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119121) [2004-10-15 11:19:41.693] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=2190 flags=0 offset=0 TTL=123 chksum=31941 TCP: port=1250 -> dport: 443 flags=***AP*** seq=337968675 ack=2133663215 off=5 res=0 win=8760 urp=0 chksum=33742 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 79 1B 20 ....a...]..Aoy. 010 : 67 47 48 6B EA 3E 4B B1 51 DF 82 83 7F 78 2A 56 gGHk.>K.Q...x*V 020 : 2D 68 28 CD 88 8E 58 85 B9 44 A9 20 E5 96 73 2D -h(...X..D. ..s- 030 : C8 F9 4E 93 D1 01 34 6C 2F DB CD 57 C1 27 67 4C ..N...4l/..W.'gL 040 : 23 79 2F 45 33 86 FA 55 F5 20 69 37 00 16 00 04 #y/E3..U. i7.... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119120) [2004-10-15 11:19:40.465] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=2423 flags=0 offset=0 TTL=123 chksum=32731 TCP: port=1188 -> dport: 443 flags=***AP*** seq=1852653888 ack=2138955848 off=5 res=0 win=8760 urp=0 chksum=6027 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7A 94 F3 ....a...]..Aoz.. 010 : 57 BE C9 95 FB 30 5B 7C 90 E7 A6 99 16 0C EF 52 W....0[|.......R 020 : 02 6A 64 D4 5C D7 CD C5 F6 E2 08 20 1F EA 4E A5 .jd.\...... ..N. 030 : 1C AB 77 74 3D 59 A0 15 6C 77 B3 E4 32 61 44 E9 ..wt=Y..lw..2aD. 040 : 6C EB D2 A6 18 0E C3 87 A1 3E 94 8D 00 16 00 04 l........>...... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119119) [2004-10-15 11:19:00.594] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=2388 flags=0 offset=0 TTL=123 chksum=32766 TCP: port=1186 -> dport: 443 flags=***AP*** seq=1841394881 ack=2093906051 off=5 res=0 win=8760 urp=0 chksum=61212 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7A 6C 2B ....a...]..Aozl+ 010 : 5F 3C 4B CB 3D CA 9F B9 9A AB C8 E0 47 90 25 09 _<K.=.......G.%. 020 : 1F 31 2F F9 29 7A C0 66 47 BA F5 20 1F EA 4E A5 .1/.)z.fG.. ..N. 030 : 1C AB 77 74 3D 59 A0 15 6C 77 B3 E4 32 61 44 E9 ..wt=Y..lw..2aD. 040 : 6C EB D2 A6 18 0E C3 87 A1 3E 94 8D 00 16 00 04 l........>...... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119118) [2004-10-15 11:17:19.733] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=2017 flags=0 offset=0 TTL=123 chksum=32114 TCP: port=1240 -> dport: 443 flags=***AP*** seq=304947488 ack=1986106469 off=5 res=0 win=8760 urp=0 chksum=14373 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 78 8D 79 ....a...]..Aox.y 010 : 42 05 A8 C4 D5 2C D1 CE F8 45 E6 29 C0 F4 EB 04 B....,...E.).... 020 : C7 00 1F 4D EF 15 29 3D 41 3D EC 20 E5 96 73 2D ...M..)=A=. ..s- 030 : C8 F9 4E 93 D1 01 34 6C 2F DB CD 57 C1 27 67 4C ..N...4l/..W.'gL 040 : 23 79 2F 45 33 86 FA 55 F5 20 69 37 00 16 00 04 #y/E3..U. i7.... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119117) [2004-10-15 11:15:33.849] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=1914 flags=0 offset=0 TTL=123 chksum=32217 TCP: port=1234 -> dport: 443 flags=***AP*** seq=280675565 ack=1895950547 off=5 res=0 win=8760 urp=0 chksum=62943 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 78 23 EF ....a...]..Aox#. 010 : 3B A3 AF 6D 87 0B D3 17 9D 33 DF 31 AF 8A CF 90 ;..m.....3.1.... 020 : 5D FE EA 08 92 3F 28 0D 3B 71 84 20 E5 96 73 2D ]....?(.;q. ..s- 030 : C8 F9 4E 93 D1 01 34 6C 2F DB CD 57 C1 27 67 4C ..N...4l/..W.'gL 040 : 23 79 2F 45 33 86 FA 55 F5 20 69 37 00 16 00 04 #y/E3..U. i7.... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119116) [2004-10-15 11:14:46.225] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=126 ID=20240 flags=0 offset=0 TTL=122 chksum=33267 TCP: port=1044 -> dport: 443 flags=***AP*** seq=7347631 ack=1833787193 off=5 res=0 win=8760 urp=0 chksum=8431 Payload: length = 86 000 : 16 03 00 00 51 01 00 00 4D 03 00 FD 75 68 C5 D7 ....Q...M...uh.. 010 : 6E 7C 42 B6 3C 89 87 5C 48 3A D0 FE 7B 44 63 3E n|B.<..\H:..{Dc> 020 : 45 E8 31 CA 36 39 A0 F6 59 AD E0 20 59 A6 9A 80 E.1.69..Y.. Y... 030 : 22 D2 DE 9D 6F A9 AE 06 6C C2 A2 22 3D F6 D6 9F "...o...l.."=... 040 : 9E 2D 01 CC FE 62 DB 22 A8 5D 0C E4 00 06 00 03 .-...b.".]...... 050 : 00 08 00 06 01 00 ...... ------------------------------------------------------------------------------ #(1 - 119115) [2004-10-15 11:14:26.068] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=12364 flags=0 offset=0 TTL=119 chksum=27028 TCP: port=62544 -> dport: 443 flags=***AP*** seq=3080854179 ack=1811475602 off=5 res=0 win=17680 urp=0 chksum=7803 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 78 97 0D ....a...]..Aox.. 010 : 28 3E A5 29 05 FB FB F1 4A 3E 68 71 82 4C 35 3B (>.)....J>hq.L5; 020 : 1F 0E 90 A3 8E 29 F9 19 E2 4F CE 20 4A 70 BE 23 .....)...O. Jp.# 030 : B4 17 A7 B9 47 94 56 C5 B2 C9 52 28 3A ED 37 A6 ....G.V...R(:.7. 040 : 67 4C F3 F5 B7 4E 12 F3 48 8E DA D3 00 16 00 04 gL...N..H....... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119114) [2004-10-15 11:14:17.185] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=12301 flags=0 offset=0 TTL=119 chksum=27091 TCP: port=62407 -> dport: 443 flags=***AP*** seq=669221382 ack=1793005528 off=5 res=0 win=17680 urp=0 chksum=54648 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 78 8F A1 ....a...]..Aox.. 010 : 62 BB 16 90 FF 41 ED 55 8B 47 41 52 E8 8E 3E 59 b....A.U.GAR..>Y 020 : 2A D4 07 BD B2 40 0B 59 23 69 03 20 4A 70 BE 23 *....@.Y#i. Jp.# 030 : B4 17 A7 B9 47 94 56 C5 B2 C9 52 28 3A ED 37 A6 ....G.V...R(:.7. 040 : 67 4C F3 F5 B7 4E 12 F3 48 8E DA D3 00 16 00 04 gL...N..H....... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119113) [2004-10-15 11:12:03.505] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=2852 flags=0 offset=0 TTL=123 chksum=31848 TCP: port=1228 -> dport: 443 flags=***AP*** seq=2460310754 ack=1660156591 off=5 res=0 win=8760 urp=0 chksum=37220 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 77 F0 FC ....a...]..Aow.. 010 : DB B1 E7 9E 5B A5 A5 B8 7D 6D 3A 12 57 46 27 58 ....[...}m:.WF'X 020 : A0 A2 DC 49 1D 35 6A 0E F8 6B B3 20 BF BA C7 3F ...I.5j..k. ...? 030 : B0 E3 B0 C5 4C 42 C5 DC 8B 5E 23 1A BB C2 A1 90 ....LB...^#..... 040 : 06 F5 57 73 4F 69 FA 67 AE BC F0 E4 00 16 00 04 ..WsOi.g........ 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119112) [2004-10-15 11:12:03.325] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=2850 flags=0 offset=0 TTL=123 chksum=31850 TCP: port=1228 -> dport: 443 flags=***AP*** seq=2460310754 ack=1660156591 off=5 res=0 win=8760 urp=0 chksum=37220 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 77 F0 FC ....a...]..Aow.. 010 : DB B1 E7 9E 5B A5 A5 B8 7D 6D 3A 12 57 46 27 58 ....[...}m:.WF'X 020 : A0 A2 DC 49 1D 35 6A 0E F8 6B B3 20 BF BA C7 3F ...I.5j..k. ...? 030 : B0 E3 B0 C5 4C 42 C5 DC 8B 5E 23 1A BB C2 A1 90 ....LB...^#..... 040 : 06 F5 57 73 4F 69 FA 67 AE BC F0 E4 00 16 00 04 ..WsOi.g........ 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119111) [2004-10-15 11:11:53.289] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=11677 flags=0 offset=0 TTL=119 chksum=27715 TCP: port=63787 -> dport: 443 flags=***AP*** seq=1179052745 ack=1662527184 off=5 res=0 win=17680 urp=0 chksum=3454 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 77 FF 6E ....a...]..Aow.n 010 : 10 99 9D 95 44 6A BB 5D D7 CC B0 33 44 F4 18 8E ....Dj.]...3D... 020 : 9D CD 13 07 ED 38 70 91 60 53 32 20 4A 70 BE 23 .....8p.`S2 Jp.# 030 : B4 17 A7 B9 47 94 56 C5 B2 C9 52 28 3A ED 37 A6 ....G.V...R(:.7. 040 : 67 4C F3 F5 B7 4E 12 F3 48 8E DA D3 00 16 00 04 gL...N..H....... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119110) [2004-10-15 11:09:24.988] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=1492 flags=0 offset=0 TTL=123 chksum=32639 TCP: port=1210 -> dport: 443 flags=***AP*** seq=195010945 ack=1490632192 off=5 res=0 win=8760 urp=0 chksum=59283 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 76 B2 4F ....a...]..Aov.O 010 : C7 D8 A3 AA 1A 0B 42 60 90 08 36 1B B3 47 02 D1 ......B`..6..G.. 020 : 03 AD 98 FF 27 A1 87 B5 51 CF DE 20 77 CE 0B EC ....'...Q.. w... 030 : 7A 87 CE E2 3D C4 84 01 94 04 9A 99 0E 22 8B 4B z...=........".K 040 : 81 10 B0 88 A0 F0 1A 4F BD D3 26 BB 00 16 00 04 .......O..&..... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119109) [2004-10-15 11:09:19.233] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=1227 flags=0 offset=0 TTL=123 chksum=34661 TCP: port=1145 -> dport: 443 flags=***AP*** seq=3288666143 ack=1467425857 off=5 res=0 win=8760 urp=0 chksum=45874 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 77 9A 7D ....a...]..Aow.} 010 : 92 19 55 2C BA 8E 3F 81 04 ED D7 9C 2C EE 05 3F ..U,..?.....,..? 020 : 7D D8 B1 38 9A CB F2 56 EA 07 21 20 1C CC FA E2 }..8...V..! .... 030 : 78 34 35 FF A7 2F 02 34 03 C5 D6 D6 83 79 89 30 x45../.4.....y.0 040 : 5B 1E 5E 11 96 2D E6 B7 8D 2B 5E B4 00 16 00 04 [.^..-...+^..... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119108) [2004-10-15 11:09:18.993] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=1224 flags=0 offset=0 TTL=123 chksum=34664 TCP: port=1145 -> dport: 443 flags=***AP*** seq=3288666143 ack=1467425857 off=5 res=0 win=8760 urp=0 chksum=45874 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 77 9A 7D ....a...]..Aow.} 010 : 92 19 55 2C BA 8E 3F 81 04 ED D7 9C 2C EE 05 3F ..U,..?.....,..? 020 : 7D D8 B1 38 9A CB F2 56 EA 07 21 20 1C CC FA E2 }..8...V..! .... 030 : 78 34 35 FF A7 2F 02 34 03 C5 D6 D6 83 79 89 30 x45../.4.....y.0 040 : 5B 1E 5E 11 96 2D E6 B7 8D 2B 5E B4 00 16 00 04 [.^..-...+^..... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119107) [2004-10-15 11:08:42.315] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=2754 flags=0 offset=0 TTL=123 chksum=31663 TCP: port=1287 -> dport: 443 flags=***AP*** seq=703723159 ack=1451105124 off=5 res=0 win=8760 urp=0 chksum=4355 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 77 7B 7D ....a...]..Aow{} 010 : 1F ED 1A 08 26 96 A0 64 6C A6 EE 70 94 BC 6A 85 ....&..dl..p..j. 020 : 69 9E 6B DF A9 B9 14 3A 96 05 18 20 03 43 4E D6 i.k....:... .CN. 030 : 45 5F 29 46 08 1B 56 CE 78 3E 10 57 D8 85 E7 73 E_)F..V.x>.W...s 040 : B6 A6 83 A6 60 D6 F8 E6 D5 A9 39 72 00 16 00 04 ....`.....9r.... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119106) [2004-10-15 11:08:33.866] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=2648 flags=0 offset=0 TTL=123 chksum=32052 TCP: port=1217 -> dport: 443 flags=***AP*** seq=2408957704 ack=1411665560 off=5 res=0 win=8760 urp=0 chksum=26293 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 77 12 B8 ....a...]..Aow.. 010 : 42 9A B0 C5 8F 4A 3A 59 2E EB 41 D2 43 72 8F F6 B....J:Y..A.Cr.. 020 : 1A 42 5C 82 21 89 0F C3 31 A4 CF 20 32 1B 1A DB .B\.!...1.. 2... 030 : 28 A3 7E 63 A8 CC 30 5B DC 0C 50 C4 55 B4 21 57 (.~c..0[..P.U.!W 040 : E3 1E F4 1C D6 EE BF 3D 81 DA 4B 7F 00 16 00 04 .......=..K.... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119105) [2004-10-15 11:08:20.746] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=2646 flags=0 offset=0 TTL=123 chksum=32054 TCP: port=1217 -> dport: 443 flags=***AP*** seq=2408957704 ack=1411665560 off=5 res=0 win=8760 urp=0 chksum=26293 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 77 12 B8 ....a...]..Aow.. 010 : 42 9A B0 C5 8F 4A 3A 59 2E EB 41 D2 43 72 8F F6 B....J:Y..A.Cr.. 020 : 1A 42 5C 82 21 89 0F C3 31 A4 CF 20 32 1B 1A DB .B\.!...1.. 2... 030 : 28 A3 7E 63 A8 CC 30 5B DC 0C 50 C4 55 B4 21 57 (.~c..0[..P.U.!W 040 : E3 1E F4 1C D6 EE BF 3D 81 DA 4B 7F 00 16 00 04 .......=..K.... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119104) [2004-10-15 11:08:14.125] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=2645 flags=0 offset=0 TTL=123 chksum=32055 TCP: port=1217 -> dport: 443 flags=***AP*** seq=2408957704 ack=1411665560 off=5 res=0 win=8760 urp=0 chksum=26293 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 77 12 B8 ....a...]..Aow.. 010 : 42 9A B0 C5 8F 4A 3A 59 2E EB 41 D2 43 72 8F F6 B....J:Y..A.Cr.. 020 : 1A 42 5C 82 21 89 0F C3 31 A4 CF 20 32 1B 1A DB .B\.!...1.. 2... 030 : 28 A3 7E 63 A8 CC 30 5B DC 0C 50 C4 55 B4 21 57 (.~c..0[..P.U.!W 040 : E3 1E F4 1C D6 EE BF 3D 81 DA 4B 7F 00 16 00 04 .......=..K.... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119102) [2004-10-15 11:06:15.752] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=4992 flags=0 offset=0 TTL=119 chksum=17734 TCP: port=63665 -> dport: 443 flags=***AP*** seq=4052924269 ack=1308714746 off=5 res=0 win=64240 urp=0 chksum=40982 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 3F 8D 8D 0D F4 ....a...]..?.... 010 : 57 E3 73 BF BB E7 E7 4D 21 3A AF 95 7F 9A B9 65 W.s....M!:....e 020 : ED B1 FF 11 EE 8B 9A F5 44 71 6C 20 1F 05 94 AA ........Dql .... 030 : 8C 23 DD 87 4B 11 37 C2 30 39 92 6D 21 87 B4 14 .#..K.7.09.m!... 040 : D5 A3 66 F8 C6 DE 9E DB 5C FD C7 BB 00 16 00 04 ..f.....\....... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119101) [2004-10-15 11:04:48.274] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=4950 flags=0 offset=0 TTL=119 chksum=17776 TCP: port=63272 -> dport: 443 flags=***AP*** seq=4030912113 ack=1194183787 off=5 res=0 win=64240 urp=0 chksum=34007 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 3F 8D 8C B6 D1 ....a...]..?.... 010 : E9 E2 32 4E B4 BE E4 67 E8 B7 39 77 D7 43 AE 65 ..2N...g..9w.C.e 020 : 5B 14 FD DB F8 31 26 B3 EC F2 D5 20 1F 05 94 AA [....1&.... .... 030 : 8C 23 DD 87 4B 11 37 C2 30 39 92 6D 21 87 B4 14 .#..K.7.09.m!... 040 : D5 A3 66 F8 C6 DE 9E DB 5C FD C7 BB 00 16 00 04 ..f.....\....... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119100) [2004-10-15 11:04:35.81] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=1762 flags=0 offset=0 TTL=123 chksum=33392 TCP: port=1151 -> dport: 443 flags=***AP*** seq=1625293922 ack=1179343353 off=5 res=0 win=8760 urp=0 chksum=14053 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 77 0D 54 ....a...]..Aow.T 010 : 67 1A 65 6C 6F 2A 1C 3E D6 C1 18 E0 97 9C 69 80 g.elo*.>......i. 020 : DF 4A EE AD 71 07 6B 70 E0 E6 95 20 61 3E C9 26 .J..q.kp... a>.& 030 : 20 A7 F7 7E A5 0C A5 A2 2B 4B CF 1D 45 D1 FE 1F ..~....+K..E... 040 : 13 65 06 C4 D3 3E DD 09 54 0C 2D 9A 00 16 00 04 .e...>..T.-..... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119099) [2004-10-15 11:04:21.324] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=136 ID=4999 flags=0 offset=0 TTL=121 chksum=48769 TCP: port=1025 -> dport: 443 flags=***AP*** seq=1658196291 ack=1170196491 off=5 res=0 win=17064 urp=0 chksum=22845 Payload: length = 96 000 : 16 03 00 00 5B 01 00 00 57 03 00 A0 AA 62 38 19 ....[...W....b8. 010 : 8F 32 EC E2 FC A1 20 F7 C6 6F 1F 2C 30 01 34 03 .2.... ..o.,0.4. 020 : B7 98 09 06 C5 7B 57 B3 93 6C F5 20 D4 D8 58 D6 .....{W..l. ..X. 030 : B3 59 95 9F 90 B7 CD A8 ED CB 8F E3 CC 3E A3 B9 .Y...........>.. 040 : 4D BE 71 0B 1C 5E 80 0B AC 6D 9B 64 00 10 00 04 M.q..^...m.d.... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 01 00 .......d.b...... ------------------------------------------------------------------------------ #(1 - 119098) [2004-10-15 11:03:55.789] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=4921 flags=0 offset=0 TTL=119 chksum=17805 TCP: port=63082 -> dport: 443 flags=***AP*** seq=4017769856 ack=1147344435 off=5 res=0 win=64240 urp=0 chksum=39855 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 3F 8D 8C 81 6B ....a...]..?...k 010 : 81 E5 B0 13 46 D3 75 E8 C2 2F 9C 0A 58 33 92 E1 ....F.u../..X3.. 020 : 4D 1C E5 00 46 BD 96 C1 1E 61 93 20 1F 05 94 AA M...F....a. .... 030 : 8C 23 DD 87 4B 11 37 C2 30 39 92 6D 21 87 B4 14 .#..K.7.09.m!... 040 : D5 A3 66 F8 C6 DE 9E DB 5C FD C7 BB 00 16 00 04 ..f.....\....... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119095) [2004-10-15 11:01:46.942] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=9968 flags=0 offset=0 TTL=119 chksum=29424 TCP: port=64710 -> dport: 443 flags=***AP*** seq=972703213 ack=1016506267 off=5 res=0 win=17680 urp=0 chksum=41764 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 75 A0 03 ....a...]..Aou.. 010 : 45 09 53 2E 64 FE 7A 6A AE 88 6F 69 23 C9 CC CE E.S.d.zj..oi#... 020 : 42 4D 48 CF 61 70 5F 68 5C A3 20 20 F2 43 84 8B BMH.ap_h\. .C.. 030 : 95 81 6C A6 2A 53 C3 7A 03 46 DE C7 DF F4 A4 3C ..l.*S.z.F.....< 040 : 12 24 CB FA EC 2A 65 15 B0 E9 18 91 00 16 00 04 .$...*e......... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119094) [2004-10-15 11:01:00.695] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=2375 flags=0 offset=0 TTL=123 chksum=32548 TCP: port=1246 -> dport: 443 flags=***AP*** seq=2454422606 ack=964272178 off=5 res=0 win=8760 urp=0 chksum=61722 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 76 2E 08 ....a...]..Aov.. 010 : 7D 21 0B 3F 72 A0 BC 5C CD AF 98 1F 5E E3 35 35 }!.?r..\....^.55 020 : EB CD 54 73 C7 DD B4 F3 80 DE 71 20 E7 49 68 FA ..Ts......q .Ih. 030 : E5 34 42 52 58 EE 2F 1A 42 6B A6 8D 17 D5 10 08 .4BRX./.Bk...... 040 : CE 54 B7 26 B1 CB 8A 69 EA 06 9D 2C 00 16 00 04 .T.&...i...,.... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. ------------------------------------------------------------------------------ #(1 - 119093) [2004-10-15 11:00:59.301] [nessus/12204] [nessus/12204] url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid Client_Hello attempt IPv4: cut source and target hlen=5 TOS=0 dlen=142 ID=2373 flags=0 offset=0 TTL=123 chksum=32550 TCP: port=1246 -> dport: 443 flags=***AP*** seq=2454422606 ack=964272178 off=5 res=0 win=8760 urp=0 chksum=61722 Payload: length = 102 000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 76 2E 08 ....a...]..Aov.. 010 : 7D 21 0B 3F 72 A0 BC 5C CD AF 98 1F 5E E3 35 35 }!.?r..\....^.55 020 : EB CD 54 73 C7 DD B4 F3 80 DE 71 20 E7 49 68 FA ..Ts......q .Ih. 030 : E5 34 42 52 58 EE 2F 1A 42 6B A6 8D 17 D5 10 08 .4BRX./.Bk...... 040 : CE 54 B7 26 B1 CB 8A 69 EA 06 9D 2C 00 16 00 04 .T.&...i...,.... 050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b...... 060 : 00 12 00 63 01 00 ...c.. -- ***************************** **** Vladimir Stavrinov *** ******* vs@xxxxxxxx ******* ***************************** ------------------------------------------------------- This Newsletter Sponsored by: Macrovision For reliable Linux application installations, use the industry's leading setup authoring tool, InstallShield X. Learn more and evaluate today. http://clk.atdmt.com/MSI/go/ins0030000001msi/direct/01/ |
|
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| Previous by Date: | Snort signatures for PBX: 00202, Teicher, Mark |
|---|---|
| Next by Date: | SID 480 - False Positive: 00202, Firth, Matt |
| Previous by Thread: | Re: WEB-MISC SSLv3 invalid Client_Hello attempti: 00202, Brian |
| Next by Thread: | Re: WEB-MISC SSLv3 invalid Client_Hello attempt: 00202, M. Shirk |
| Indexes: | [Date] [Thread] [Top] [All Lists] |
| News | FAQ | advertise |