Resposta

valeu, mas estou com e saguinte duvida e pq o snort esta apresentando os seguintes logs.

[**] [1:620:6] SCAN Proxy Port 8080 attempt [**]
[Classification: Attempted Information Leak] [Priority: 2]
09/15-19:02:19.880250 204.251.10.95:50211 -> 201.24.133.202:8080
TCP TTL:46 TOS:0x0 ID:51198 IpLen:20 DgmLen:60 DF
******S* Seq: 0x1257336C Ack: 0x0 Win: 0x16D0 TcpLen: 40
TCP Options (5) => MSS: 1460 SackOK TS: 1923413138 0 NOP WS: 2

[**] [1:618:5] SCAN Squid Proxy attempt [**]
[Classification: Attempted Information Leak] [Priority: 2]
09/15-19:02:19.886359 204.251.10.95:34488 -> 201.24.133.202:3128
TCP TTL:46 TOS:0x0 ID:52842 IpLen:20 DgmLen:60 DF
******S* Seq: 0x12533AFB Ack: 0x0 Win: 0x16D0 TcpLen: 40
TCP Options (5) => MSS: 1460 SackOK TS: 1923413137 0 NOP WS: 2

[**] [1:402:4] ICMP Destination Unreachable (Port Unreachable) [**]
[Classification: Misc activity] [Priority: 3]
09/15-16:27:16.549618 201.26.42.15 -> 201.24.133.202
ICMP TTL:119 TOS:0x0 ID:31152 IpLen:20 DgmLen:56
Type:3 Code:3 DESTINATION UNREACHABLE: PORT UNREACHABLE
** ORIGINAL DATAGRAM DUMP:
201.24.133.202:1716 -> 201.26.42.15:9522
UDP TTL:119 TOS:0x0 ID:31662 IpLen:20 DgmLen:91
Len: 63
** END OF DUMP

[**] [1:402:4] ICMP Destination Unreachable (Port Unreachable) [**]
[Classification: Misc activity] [Priority: 3]
09/15-16:27:18.603649 201.26.42.15 -> 201.24.133.202
ICMP TTL:119 TOS:0x0 ID:31166 IpLen:20 DgmLen:56
Type:3 Code:3 DESTINATION UNREACHABLE: PORT UNREACHABLE
** ORIGINAL DATAGRAM DUMP:
201.24.133.202:1716 -> 201.26.42.15:9522
UDP TTL:119 TOS:0x0 ID:31700 IpLen:20 DgmLen:91
Len: 63
** END OF DUMP

e no Guardian so aparece isto aki no log
Guardian process id 6155
Guardian process id 6163
Guardian process id 4294
Guardian process id 4323


E isto mesmo? Acredito que não