ips log

2009:08:29-18:17:29 ace75 snort[4043]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="(ftp_telnet) FTP response message was too long" group="0" srcip="10.242.1.2" dstip="10.242.1.1" proto="6" srcport="2100" dstport="8080" sid="0" class="" priority="3" generator="125" msgid="1" 

system message



2009:08:29-18:45:01 ace75 /usr/sbin/cron[9851]: (root) CMD ( /usr/local/bin/reportcontrol.sh)
2009:08:29-18:45:55 ace75 syslog-ng[3809]: Connection broken to AF_INET(192.168.2.250:514), reopening in 60 seconds
2009:08:29-18:46:01 ace75 /usr/sbin/cron[10020]: (root) CMD (/sbin/audld.plx --trigger)
2009:08:29-18:46:01 ace75 /usr/sbin/cron[5110]: (*system*) RELOAD (/etc/crontab)
2009:08:29-18:46:55 ace75 syslog-ng[3809]: Connection broken to AF_INET(192.168.2.250:514), reopening in 60 seconds
2009:08:29-18:47:01 ace75 /usr/sbin/cron[10042]: (root) CMD ( nice -n19 /usr/local/bin/gen_inline_reporting_data.plx)
2009:08:29-18:48:19 ace75 syslog-ng[3809]: Connection broken to AF_INET(192.168.2.250:514), reopening in 60 seconds
2009:08:29-18:50:01 ace75 /usr/sbin/cron[10086]: (root) CMD ( /usr/local/bin/reportcontrol.sh)
2009:08:29-18:50:01 ace75 syslog-ng[3809]: Connection broken to AF_INET(192.168.2.250:514), reopening in 60 seconds
2009:08:29-18:51:01 ace75 syslog-ng[3809]: Connection broken to AF_INET(192.168.2.250:514), reopening in 60 seconds
2009:08:29-18:51:01 ace75 /usr/sbin/cron[10115]: (root) CMD (/usr/local/bin/netselector.plx --infile /etc/up2date/authservers.ini --outfile /etc/up2date/servers.sorted)
2009:08:29-18:52:01 ace75 syslog-ng[3809]: io.c: do_write: write() failed (errno 111), Connection refused
2009:08:29-18:52:01 ace75 syslog-ng[3809]: Connection broken to AF_INET(192.168.2.250:514), reopening in 60 seconds 

ftp proxy message

2009:08:29-18:48:48 ace75 frox[10070]: ... to 121.247.65.116()
2009:08:29-18:48:49 ace75 frox[10070]: Connection refused when trying to connect to 121.247.65.116
2009:08:29-18:48:49 ace75 frox[10070]: Connection closed -- unable to contact server
2009:08:29-18:48:49 ace75 frox[10070]: Closing session
2009:08:29-18:48:50 ace75 frox[10071]: Connect from 192.168.2.250
2009:08:29-18:48:50 ace75 frox[10071]: ... to 121.247.65.116()
2009:08:29-18:48:50 ace75 frox[10071]: Connection refused when trying to connect to 121.247.65.116
2009:08:29-18:48:50 ace75 frox[10071]: Connection closed -- unable to contact server
2009:08:29-18:48:50 ace75 frox[10071]: Closing session
2009:08:29-18:48:52 ace75 frox[10072]: Connect from 192.168.2.250
2009:08:29-18:48:52 ace75 frox[10072]: ... to 121.247.65.116()
2009:08:29-18:48:52 ace75 frox[10072]: Connection refused when trying to connect to 121.247.65.116
2009:08:29-18:48:52 ace75 frox[10072]: Connection closed -- unable to contact server
2009:08:29-18:48:52 ace75 frox[10072]: Closing session