Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 0 replies
  • Subscribers 2 subscribers
  • Views 375 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Amsn or MSN

gqs
Hi,

I wanna have some precisions about the amsn protocol because I've bocked just the file transfer and I've got this message in the intrusion protection log:
2008:03:13-11:20:51 (none) barnyard[6197]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="CHAT MSN outbound file transfer request" group="607" srcip="192.168.10.185" dstip="207.46.26.30" proto="6" srcport="34684" dstport="1863" sid="1986" class="Potential Corporate Privacy Violation" priority="1" generator="1" msgid="0"
2008:03:13-11:20:52 (none) barnyard[6197]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="CHAT MSN outbound file transfer request" group="607" srcip="192.168.10.185" dstip="207.46.26.131" proto="6" srcport="56654" dstport="1863" sid="1986" class="Potential Corporate Privacy Violation" priority="1" generator="1" msgid="0"
2008:03:13-11:20:52 (none) barnyard[6197]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="CHAT MSN outbound file transfer request" group="607" srcip="192.168.10.185" dstip="207.46.27.70" proto="6" srcport="39884" dstport="1863" sid="1986" class="Potential Corporate Privacy Violation" priority="1" generator="1" msgid="0"
2008:03:13-11:20:54 (none) barnyard[6197]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="CHAT MSN outbound file transfer request" group="607" srcip="192.168.10.185" dstip="207.46.26.30" proto="6" srcport="34684" dstport="1863" sid="1986" class="Potential Corporate Privacy Violation" priority="1" generator="1" msgid="0"
2008:03:13-11:20:56 (none) barnyard[6197]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="CHAT MSN outbound file transfer request" group="607" srcip="192.168.10.185" dstip="207.46.26.131" proto="6" srcport="56654" dstport="1863" sid="1986" class="Potential Corporate Privacy Violation" priority="1" generator="1" msgid="0"
2008:03:13-11:20:57 (none) barnyard[6197]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="CHAT MSN outbound file transfer request" group="607" srcip="192.168.10.185" dstip="207.46.27.70" proto="6" srcport="39884" dstport="1863" sid="1986" class="Potential Corporate Privacy Violation" priority="1" generator="1" msgid="0" 

I don't know if it's a false positive or no... Because I never try to send a file!
I just wanna know if it's ok or not

thanks,


This thread was automatically locked due to age.