2014:03:04-02:00:22 mail-1 ulogd[9865]: id="2104" severity="info" sys="SecureNet" sub="ips" name="ICMP flood detected" action="ICMP flood" fwrule="60014" initf="eth1" srcmac="70:ca:9b:b9:f8:23" dstmac="0:1a:8c:f0:51:1" srcip="203.195.225.12" dstip="80.95.109.170" proto="1" length="84" tos="0x00" prec="0x00" ttl="44" type="8" code="0" 
2014:03:04-05:42:16 mail-1 ulogd[9865]: id="2104" severity="info" sys="SecureNet" sub="ips" name="ICMP flood detected" action="ICMP flood" fwrule="60014" initf="reds1" srcmac="0:12:3f:af:22:b9" dstmac="0:6a:f:3d:84:51" srcip="192.168.44.4" dstip="192.168.101.211" proto="1" length="28" tos="0x00" prec="0x00" ttl="128" type="8" code="0" 
2014:03:04-05:42:26 mail-1 ulogd[9865]: id="2104" severity="info" sys="SecureNet" sub="ips" name="ICMP flood detected" action="ICMP flood" fwrule="60014" initf="reds1" srcmac="0:12:3f:af:22:b9" dstmac="0:6a:f:3d:84:51" srcip="192.168.44.4" dstip="192.168.101.229" proto="1" length="28" tos="0x00" prec="0x00" ttl="128" type="8" code="0" 
2014:03:04-05:57:14 mail-1 ulogd[9865]: id="2104" severity="info" sys="SecureNet" sub="ips" name="ICMP flood detected" action="ICMP flood" fwrule="60014" initf="reds1" srcmac="0:12:3f:af:22:b9" dstmac="0:6a:f:3d:84:51" srcip="192.168.44.4" dstip="172.20.247.241" proto="1" length="60" tos="0x00" prec="0x00" ttl="32" type="8" code="0" 
2014:03:04-06:05:23 mail-1 ulogd[9865]: id="2104" severity="info" sys="SecureNet" sub="ips" name="ICMP flood detected" action="ICMP flood" fwrule="60014" initf="eth1" srcmac="70:ca:9b:b9:f8:23" dstmac="0:1a:8c:f0:51:1" srcip="182.254.39.11" dstip="80.95.109.170" proto="1" length="84" tos="0x00" prec="0x00" ttl="47" type="8" code="0" 
2014:03:04-06:05:23 mail-1 ulogd[9865]: id="2104" severity="info" sys="SecureNet" sub="ips" name="ICMP flood detected" action="ICMP flood" fwrule="60014" initf="eth1" srcmac="70:ca:9b:b9:f8:23" dstmac="0:1a:8c:f0:51:1" srcip="203.205.160.15" dstip="80.95.109.170" proto="1" length="84" tos="0x00" prec="0x00" ttl="52" type="8" code="0" 
2014:03:04-06:16:17 mail-1 snort[6402]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="FILE-OTHER Corel PDF fusion XPS stack buffer overflow attempt" group="500" srcip="95.101.0.114" dstip="80.95.109.170" proto="6" srcport="80" dstport="32705" sid="29465" class="Attempted User Privilege Gain" priority="1"  generator="1" msgid="0"
2014:03:04-06:22:20 mail-1 snort[6402]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="FILE-OTHER Corel PDF fusion XPS stack buffer overflow attempt" group="500" srcip="23.62.237.110" dstip="80.95.109.170" proto="6" srcport="80" dstport="44168" sid="29465" class="Attempted User Privilege Gain" priority="1"  generator="1" msgid="0"
2014:03:04-06:47:46 mail-1 ulogd[9865]: id="2104" severity="info" sys="SecureNet" sub="ips" name="ICMP flood detected" action="ICMP flood" fwrule="60014" initf="eth0" srcmac="0:50:56:ad:4e:3" dstmac="0:1a:8c:f0:51:0" srcip="192.168.101.201" dstip="172.20.247.25" proto="1" length="91" tos="0x00" prec="0x00" ttl="128" type="3" code="3" 
2014:03:04-06:50:19 mail-1 ulogd[9865]: id="2104" severity="info" sys="SecureNet" sub="ips" name="ICMP flood detected" action="ICMP flood" fwrule="60014" initf="eth0" srcmac="0:50:56:ad:4e:3" dstmac="0:1a:8c:f0:51:0" srcip="192.168.101.201" dstip="172.20.247.33" proto="1" length="91" tos="0x00" prec="0x00" ttl="128" type="3" code="3" 
2014:03:04-07:27:40 mail-1 ulogd[9865]: id="2104" severity="info" sys="SecureNet" sub="ips" name="ICMP flood detected" action="ICMP flood" fwrule="60014" initf="reds1" srcmac="0:12:3f:af:22:b9" dstmac="0:6a:f:3d:84:51" srcip="192.168.44.4" dstip="172.20.247.241" proto="1" length="28" tos="0x00" prec="0x00" ttl="128" type="8" code="0" 
2014:03:04-07:27:47 mail-1 ulogd[9865]: id="2104" severity="info" sys="SecureNet" sub="ips" name="ICMP flood detected" action="ICMP flood" fwrule="60014" initf="reds1" srcmac="0:12:3f:af:22:b9" dstmac="0:6a:f:3d:84:51" srcip="192.168.44.4" dstip="192.168.101.229" proto="1" length="60" tos="0x00" prec="0x00" ttl="32" type="8" code="0" 
2014:03:04-07:32:26 mail-1 ulogd[9865]: id="2104" severity="info" sys="SecureNet" sub="ips" name="ICMP flood detected" action="ICMP flood" fwrule="60014" initf="reds1" srcmac="0:12:3f:af:22:b9" dstmac="0:6a:f:3d:84:51" srcip="192.168.44.4" dstip="172.20.247.241" proto="1" length="28" tos="0x00" prec="0x00" ttl="128" type="8" code="0" 
2014:03:04-07:36:21 mail-1 snort[6402]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="FILE-OTHER Corel PDF fusion XPS stack buffer overflow attempt" group="500" srcip="23.62.237.118" dstip="80.95.109.170" proto="6" srcport="80" dstport="25473" sid="29466" class="Attempted User Privilege Gain" priority="1"  generator="1" msgid="0"
2014:03:04-07:36:40 mail-1 snort[6402]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="FILE-OTHER Corel PDF fusion XPS stack buffer overflow attempt" group="500" srcip="80.157.149.19" dstip="80.95.109.170" proto="6" srcport="80" dstport="24787" sid="29466" class="Attempted User Privilege Gain" priority="1"  generator="1" msgid="0"
2014:03:04-07:37:25 mail-1 snort[6402]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="FILE-OTHER Corel PDF fusion XPS stack buffer overflow attempt" group="500" srcip="77.67.96.199" dstip="80.95.109.170" proto="6" srcport="80" dstport="29667" sid="29466" class="Attempted User Privilege Gain" priority="1"  generator="1" msgid="0"
2014:03:04-07:37:59 mail-1 snort[6402]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="FILE-OTHER Corel PDF fusion XPS stack buffer overflow attempt" group="500" srcip="77.67.96.213" dstip="80.95.109.170" proto="6" srcport="80" dstport="39485" sid="29466" class="Attempted User Privilege Gain" priority="1"  generator="1" msgid="0"
2014:03:04-07:38:42 mail-1 snort[6402]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="FILE-OTHER Corel PDF fusion XPS stack buffer overflow attempt" group="500" srcip="80.157.149.11" dstip="80.95.109.170" proto="6" srcport="80" dstport="29109" sid="29466" class="Attempted User Privilege Gain" priority="1"  generator="1" msgid="0"
2014:03:04-07:38:46 mail-1 snort[6402]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="FILE-OTHER Corel PDF fusion XPS stack buffer overflow attempt" group="500" srcip="80.157.149.11" dstip="80.95.109.170" proto="6" srcport="80" dstport="29115" sid="29466" class="Attempted User Privilege Gain" priority="1"  generator="1" msgid="0"
2014:03:04-07:42:45 mail-1 snort[6402]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="FILE-OTHER Corel PDF fusion XPS stack buffer overflow attempt" group="500" srcip="77.67.96.199" dstip="80.95.109.170" proto="6" srcport="80" dstport="30739" sid="29466" class="Attempted User Privilege Gain" priority="1"  generator="1" msgid="0"
2014:03:04-08:49:51 mail-1 ulogd[9865]: id="2104" severity="info" sys="SecureNet" sub="ips" name="ICMP flood detected" action="ICMP flood" fwrule="60014" initf="eth0" srcmac="0:50:56:ad:4e:3" dstmac="0:1a:8c:f0:51:0" srcip="192.168.101.201" dstip="10.242.21.1" proto="1" length="95" tos="0x0