A reader posted that they are observing strange TCP 443 behavior that looks like a fast flux [1] style pattern. They have a large snort sensor install base. Is anyone else seeing behavior like this? If so.... Got packets? If you are seeing this behavior and are allowed pleaes report it!
[1] http://www.honeynet.org/papers/ff/ Richard Porter --- ISC Handler on Duty |
Richard 168 Posts ISC Handler Dec 7th 2012 |
Thread locked Subscribe |
Dec 7th 2012 8 years ago |
Sign Up for Free or Log In to start participating in the conversation!