Re: [Prelude Universal SIM system] #328: RULE CISCO-VPN.RULES ( Authentication rejected) UNRECOGNIZED FOR PRELUDE-LML
"Prelude Universal SIM system" <[email protected]> Mon, 03 Nov 2008 13:36:50 -0000
| Newsgroups | gmane.comp.security.ids.prelude.devel |
|---|---|
| Message-ID | <[email protected]> |
#328: RULE CISCO-VPN.RULES ( Authentication rejected) UNRECOGNIZED FOR PRELUDE- LML -----------------------------------+---------------------------------------- Reporter: [email protected] | Owner: Type: defect | Status: new Priority: high | Milestone: Prelude-LML 0.9.15 Component: prelude-lml | Version: 0.9 Severity: critical | Resolution: Keywords: | -----------------------------------+---------------------------------------- Comment(by [email protected]): Replying to [comment:1 yoann]: > Could you please provide input logs that aren't matched by the current ruleset, so that we can look at the issue? Hi Yoann, Yes sure! Nov 3 08:56:25 xx.xxx.xx.xx 3752150 11/03/2008 09:03:03.660 SEV=3 AUTH/5 RPT=33245 190.74.200.57 Authentication rejected: Reason = Unspecified handle = 687, server = xxx.xxx.xx.xx, user = dromer, domain = <not specified> Nov 3 08:57:33 xxx.xxx.xx.xx 3752396 11/03/2008 09:04:11.330 SEV=3 AUTH/5 RPT=33246 190.38.158.25 Authentication rejected: Reason = Unspecified handle = 681, server = xxx.xxx.xx.xx, user = tp1fallvi, domain = <not specified> Where: xxx.xxx.xx.xx is IP address -- Ticket URL: <https://trac.prelude-ids.org/ticket/328#comment:2> Prelude Universal SIM system <http://www.prelude-ids.com> Prelude Universal SIM system _______________________________________________ Prelude-devel site list [email protected] http://lists.prelude-ids.org/mailman/listinfo/prelude-devel