This is a sample Snort (Network Intrusion Detection) objective from our Snare Server. Links have been disabled in the data below, but normally you would be able to drill down on any of the 'coloured squares' for more information.

---

This objective was regenerated on 17 November 2006 00:38:20

15 Minute Pattern Map Move mouse cursor over a square to display the number of events, and click the square to view the raw logs
	1				2				3				4				5				6				7				8				9				10				11				12				13				14				15				16				17				18				19				20				21				22				23				24
03/11/2006
04/11/2006
05/11/2006
06/11/2006
07/11/2006
08/11/2006
09/11/2006
10/11/2006
11/11/2006
12/11/2006
13/11/2006
14/11/2006
15/11/2006
16/11/2006
17/11/2006
	1				2				3				4				5				6				7				8				9				10				11				12				13				14				15				16				17				18				19				20				21				22				23				24
Key:	1																																																																	2500

Map of Attack Sources & Destinations

Top 20 Event Classes

ICMP Destination Unreacha..	46610
ICMP PING	5404
ICMP Echo Reply	5292
INFO web bug 0x0 gif atte..	4258
ICMP PING *NIX	3380
ICMP PING BSDtype	3380
COMMUNITY WEB-MISC mod_jr..	2936
ICMP Destination Unreacha..	2902
COMMUNITY SIP DNS No such..	2325
ICMP Time-To-Live Exceede..	1763
WEB-PHP viewtopic.php acc..	852
(http_inspect) BARE BYTE ..	544
WEB-PHP PHPBB viewforum.p..	414
ICMP Destination Unreacha..	350
COMMUNITY WEB-ATTACKS GFI..	291
MS-SQL version overflow a..	286
MS-SQL Worm propagation a..	286
MS-SQL Worm propagation a..	286
(portscan) UDP Portscan	250
(portscan) TCP Portscan	248
Key: 0	50000

Port Map for the last 24 hours Click on the image for more details associated with particular dots.