• Support
  • Forums
  • Blogs
A New Community Experience is Coming! For more information, please see our announcement.

snort generic events

paul_psmithpaul_psmith

Space invader
+14
edited December 2012 in AlienVault USM Appliance > Sensor
I am getting a whole bunch of snort generic events in my SIEM.

Event Type ID is 2000000000 but no Category or sub-category. Here is the event. I've pulled out random stuff in case there is PII in there.

GET http://creativeby1.unicast.com/assets/A246/28323/M1994/C59586/GreyCircle_WhiteArrow.swf?0.578190664849 HTTP/1.1  Accept: */* 
Accept-Language: en-US  Referer: http://www.cnbc.com/  x-flash-version: 10,2,159,1  Accept-Encoding: gzip, deflate  User-Agent: Mozilla/4.0
(compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0;
.NET4.0C)  Host: creativeby1.unicast.com  Proxy-Connection: Keep-Alive  Cookie:
VWCKG300=L0/Q99584_19894_2001_121412_1_013113_593331x1; SVWCUKG300=5935_1 




Share post:

This discussion has been closed.