Shirt Pocket Discussions  
    Home netTunes launchTunes SuperDuper! Buy Now Support Discussions About Shirt Pocket    

Go Back   Shirt Pocket Discussions > SuperDuper! > General
FAQ Community Calendar Today's Posts Search

Reply
 
Thread Tools Rate Thread Display Modes
  #1  
Old 04-18-2007, 10:47 PM
quwax quwax is offline
Registered User
 
Join Date: Apr 2007
Posts: 17
Snort alarms

Hello,
while the back up through SuperDuper! from my Powerbook to a disimage on the server is running I get a lot of Snort Warnings like this:
"WEB-MISC cat%20 access"
"WEB-MISC WebDAV search access"
"WEB-MISC /etc/passwd"
"WEB-MISC cross site scripting attempt"
etc.
in the log from SuperDuper! i havbe these entries for the time in question:
11:19:29 PM | Info | /Users
| 11:37:02 PM | Info | /usr
| 11:38:39 PM | Info | /dev
| 11:38:39 PM | Info | /Volumes
| 11:38:39 PM | Info | Ignoring /Volumes/xxx_Bu
| 11:38:39 PM | Info | Ignoring /Volumes/HD_xxx
| 11:38:39 PM | Info | Ignoring /Volumes/bbb
| 11:38:39 PM | Info | Ignoring /Volumes/dddd
| 11:38:39 PM | Info | Ignoring /Volumes/BU_xxxSys
| 11:38:39 PM | Info | Ignoring /Volumes/ccc
| 11:38:39 PM | Info | Ignoring /Volumes/Sys_BaU
| 11:38:39 PM | Info | Ignoring /Volumes/xxxSystem
| 11:38:39 PM | Info | Ignoring /Volumes/HD_System

any idea how can I stop these warnings?

Thanks
Q.
Reply With Quote
  #2  
Old 04-18-2007, 10:51 PM
dnanian's Avatar
dnanian dnanian is offline
Administrator
 
Join Date: Apr 2001
Location: Weston, MA
Posts: 14,923
Send a message via AIM to dnanian
I have no idea, Q. We're not doing anything weird at all: we're simply copying files to the image you point us to.
__________________
--Dave Nanian
Reply With Quote
  #3  
Old 04-21-2007, 06:45 AM
quwax quwax is offline
Registered User
 
Join Date: Apr 2007
Posts: 17
these warnings are always coming, when the backup is running.
I have this issue with 2 workstations and the strange thing is, it doesn't always cause Snort to produce these warning.
I'm not sure, but I think it appears only when some other network volume is mounted during the backup process. Could it be connected to that?
What's running under the hood from SuperDuper! resync?

Besides that SuperDuper! is working great!
thanks
Q.
Reply With Quote
  #4  
Old 04-21-2007, 10:19 AM
dnanian's Avatar
dnanian dnanian is offline
Administrator
 
Join Date: Apr 2001
Location: Weston, MA
Posts: 14,923
Send a message via AIM to dnanian
Nothing is running under the hood that has anything to do with networking. We copy, using standard APIs, to the image: there's no "network" access done except by the lower-level Apple routines that are doing standard network I/O...
__________________
--Dave Nanian
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 03:02 AM.


Powered by vBulletin® Version 3.8.9
Copyright ©2000 - 2024, vBulletin Solutions, Inc.