sid-msg.map
来自「入侵检测系统.linux下与MySql连用的例子」· MAP 代码 · 共 1,162 行 · 第 1/3 页
MAP
1,162 行
# $Id: sid-msg.map,v 1.14 2001/08/07 02:18:44 roesch Exp $# SID -> MSG map# Format: SID || MSG100 || Virus - Possible QAZ Worm Infection101 || Virus - Possible QAZ Worm102 || Virus - Possible QAZ Worm calling home103 || BACKDOOR subseven 22104 || BACKDOOR - Dagger_1.4.0_client_connect105 || BACKDOOR - Dagger_1.4.0106 || BACKDOOR ACKcmdC trojan scan107 || BACKDOOR subseven DEFCON8 2.1 access108 || BACKDOOR QAZ Worm Client Login access109 || BACKDOOR netbus active110 || BACKDOOR netbus getinfo111 || BACKDOOR netbus getinfo112 || BACKDOOR BackOrifice access113 || BACKDOOR DeepThroat access114 || BACKDOOR netbus active115 || BACKDOOR netbus active116 || BACKDOOR BackOrifice access117 || BACKDOOR Infector.1.x118 || BACKDOOR SatansBackdoor.2.0.Beta119 || BACKDOOR Doly 2.0 access120 || BACKDOOR Infector 1.6 Server to Client121 || BACKDOOR Infector 1.6 Client to Server Connection Request122 || BACKDOOR DeepThroat 3.1 System Info Client Request123 || BACKDOOR DeepThroat 3.1 Server FTP Port Change Client Request124 || BACKDOOR DeepThroat 3.1 FTP Status Client Request125 || BACKDOOR DeepThroat 3.1 E-Mail Info From Server126 || BACKDOOR DeepThroat 3.1 E-Mail Info Client Request127 || BACKDOOR DeepThroat 3.1 Server Status From Server128 || BACKDOOR DeepThroat 3.1 Server Status Client Request129 || BACKDOOR DeepThroat 3.1 Drive Info From Server130 || BACKDOOR DeepThroat 3.1 System Info From Server131 || BACKDOOR DeepThroat 3.1 Drive Info Client Request132 || BACKDOOR DeepThroat 3.1 Server FTP Port Change From Server133 || BACKDOOR DeepThroat 3.1 Cached Passwords Client Request134 || BACKDOOR DeepThroat 3.1 RAS Passwords Client Request135 || BACKDOOR DeepThroat 3.1 Server Password Change Client Request136 || BACKDOOR DeepThroat 3.1 Server Password Remove Client Request137 || BACKDOOR DeepThroat 3.1 Rehash Client Request138 || BACKDOOR DeepThroat 3.1 Server Rehash Client Request139 || BACKDOOR DeepThroat 3.1 System Info Client Request140 || BACKDOOR DeepThroat 3.1 ICQ Alert OFF Client Request141 || BACKDOOR HackAttack 1.20 Connect142 || BACKDOOR DeepThroat 3.1 ICQ Alert ON Client Request143 || BACKDOOR DeepThroat 3.1 Change Wallpaper Client Request144 || BACKDOOR ADMw0rm ftp retrieval145 || BACKDOOR GirlFriendaccess146 || BACKDOOR NetSphere access147 || BACKDOOR GateCrasher148 || BACKDOOR DeepThroat 3.1 Keylogger Active on Network149 || BACKDOOR DeepThroat 3.1 Client Sending Data to Server on Network150 || BACKDOOR DeepThroat 3.1 Server Active on Network151 || BACKDOOR DeepThroat 3.1 Client Sending Data to Server on Network152 || BACKDOOR BackConstruction 2.1 Connection153 || BACKDOOR DonaldDick 1.53 Traffic154 || BACKDOOR DeepThroat 3.1 Wrong Password155 || BACKDOOR NetSphere 1.31.337 access156 || BACKDOOR DeepThroat 3.1 Visible Window List Client Request157 || BACKDOOR BackConstruction 2.1 Client FTP Open Request158 || BACKDOOR BackConstruction 2.1 Server FTP Open Reply159 || BACKDOOR NetMetro File List160 || BACKDOOR NetMetro Incoming Traffic161 || BACKDOOR Matrix 2.0 Client connect162 || BACKDOOR Matrix 2.0 Server access163 || BACKDOOR WinCrash 1.0 Server Active164 || BACKDOOR DeepThroat 3.1 Server Active on Network165 || BACKDOOR DeepThroat 3.1 Keylogger on Server ON166 || BACKDOOR DeepThroat 3.1 Show Picture Client Request167 || BACKDOOR DeepThroat 3.1 Hide/Show Clock Client Request168 || BACKDOOR DeepThroat 3.1 Hide/Show Desktop Client Request169 || BACKDOOR DeepThroat 3.1 Swap Mouse Buttons Client Request170 || BACKDOOR DeepThroat 3.1 Enable/Disable CTRL-ALT-DEL Client Request171 || BACKDOOR DeepThroat 3.1 Freeze Mouse Client Request172 || BACKDOOR DeepThroat 3.1 Show Dialog Box Client Request173 || BACKDOOR DeepThroat 3.1 Show Replyable Dialog Box Client Request174 || BACKDOOR DeepThroat 3.1 Hide/Show Start Button Client Request175 || BACKDOOR DeepThroat 3.1 Resolution Change Client Request176 || BACKDOOR DeepThroat 3.1 Hide/Show Start Button Client Request177 || BACKDOOR DeepThroat 3.1 Keylogger on Server OFF178 || BACKDOOR DeepThroat 3.1 Send to URL Client Request179 || BACKDOOR DeepThroat 3.1 FTP Server Port Client Request180 || BACKDOOR DeepThroat 3.1 Process List Client request181 || BACKDOOR DeepThroat 3.1 Close Port Scan Client Request182 || BACKDOOR DeepThroat 3.1 Registry Add Client Request183 || BACKDOOR SIGNATURE - Q ICMP184 || BACKDOOR Q access185 || BACKDOOR CDK186 || BACKDOOR DeepThroat 3.1 Monitor on/off Client Request187 || BACKDOOR DeepThroat 3.1 Delete File Client Request188 || BACKDOOR DeepThroat 3.1 Kill Window Client Request189 || BACKDOOR DeepThroat 3.1 Disable Window Client Request190 || BACKDOOR DeepThroat 3.1 Enable Window Client Request191 || BACKDOOR DeepThroat 3.1 Change Window Title Client Request192 || BACKDOOR DeepThroat 3.1 Hide Window Client Request193 || BACKDOOR DeepThroat 3.1 Show Window Client Request194 || BACKDOOR DeepThroat 3.1 Send Text to Window Client Request195 || BACKDOOR DeepThroat 3.1 Server Response196 || BACKDOOR DeepThroat 3.1 Hide/Show Systray Client Request197 || BACKDOOR DeepThroat 3.1 Create Directory Client Request198 || BACKDOOR DeepThroat 3.1 All Window List Client Request199 || BACKDOOR DeepThroat 3.1 Play Sound Client Request200 || BACKDOOR DeepThroat 3.1 Run Program Normal Client Request201 || BACKDOOR DeepThroat 3.1 Run Program Hidden Client Request202 || BACKDOOR DeepThroat 3.1 Get NET File Client Request203 || BACKDOOR DeepThroat 3.1 Find File Client Request204 || BACKDOOR DeepThroat 3.1 Find File Client Request205 || BACKDOOR DeepThroat 3.1 HUP Modem Client Request206 || BACKDOOR DeepThroat 3.1 CD ROM Open Client Request207 || BACKDOOR DeepThroat 3.1 CD ROM Close Client Request208 || BACKDOOR PhaseZero Server Active on Network209 || BACKDOOR w00w00 attempt210 || BACKDOOR attempt211 || BACKDOOR MISC r00t attempt212 || BACKDOOR MISC rewt attempt213 || BACKDOOR MISC linux rootkit attempt214 || BACKDOOR MISC linux rootkit attempt lrkr0x215 || BACKDOOR MISC linux rootkit attempt216 || BACKDOOR MISC linux rootkit attempt217 || BACKDOOR MISC sm4ck attempt218 || BACKDOOR MISC solaris 2.5 attempt219 || BACKDOOR HidePak backdoor attempt220 || BACKDOOR HideSource backdoor attempt221 || DDOS TFN Probe222 || DDOS tfn2k icmp possible communication223 || DDOS Trin00\:DaemontoMaster(PONGdetected)224 || DDOS Stacheldraht server-spoof225 || DDOS Stacheldraht server-response-gag226 || DDOS Stacheldraht server-response227 || DDOS Stacheldraht client-spoofworks228 || DDOS TFN client command BE229 || DDOS Stacheldraht client-check230 || DDOS shaft client to handler231 || DDOS Trin00:DaemontoMaster(messagedetected)232 || DDOS Trin00:DaemontoMaster(*HELLO*detected)233 || DDOS Trin00:Attacker to Master default startup password234 || DDOS Trin00 Attacker to Master default password235 || DDOS Trin00 Attacker to Master default mdie password236 || DDOS Stacheldraht client-check-gag237 || DDOS Trin00:MastertoDaemon(defaultpassdetected!)238 || DDOS TFN server response239 || DDOS shaft handler to agent240 || DDOS shaft agent to handler241 || DDOS shaft synflood242 || DDOS shaft synflood incoming243 || DDOS mstream agent to handler244 || DDOS mstream handler to agent245 || DDOS mstream handler ping to agent246 || DDOS mstream agent pong to handler247 || DDOS mstream client to handler248 || DDOS mstream handler to client249 || DDOS mstream client to handler250 || DDOS mstream handler to client251 || DDOS - TFN client command LE252 || DNS named iquery attempt253 || DNS SPOOF query response PTR with TTL: 1 min. and no authority254 || DNS SPOOF query response with ttl: 1 min. and no authority255 || DNS zone transfer256 || DNS named authors attempt257 || DNS named version attempt258 || DNS EXPLOIT named 8.2->8.2.1259 || DNS EXPLOIT named overflow260 || DNS EXPLOIT named exploit261 || DNS EXPLOIT named262 || DNS EXPLOIT x86 linux263 || DNS EXPLOIT x86 linux generic264 || DNS EXPLOIT x86 linux265 || DNS EXPLOIT x86 linux ADMv2266 || DNS EXPLOIT x86 freebsd267 || DNS EXPLOIT sparc268 || DOS Jolt attack269 || DOS Land attack270 || DOS Teardrop attack271 || DOS UDP Bomb272 || DOS IGMP dos attack273 || DOS IGMP dos attack274 || DOS ath275 || DOS NAPTHA276 || DOS Real Audio Server277 || DOS Real Server template.html278 || DOS Real Server template.html279 || DOS Bay/Nortel Nautica Marlin280 || DOS ath0281 || DOS Ascend Route282 || DOS arkiea backup283 || EXPLOIT netscape 4.7 client overflow284 || EXPLOIT pop2 x86 linux overflow285 || EXPLOIT pop2 x86 linux overflow286 || EXPLOIT pop3 x86 bsd overflow287 || EXPLOIT pop3 x86 bsd overflow288 || EXPLOIT pop3 x86 linux overflow289 || EXPLOIT pop3 x86 sco overflow290 || EXPLOIT qpopper overflow291 || EXPLOIT NNTP Cassandra Overflow292 || EXPLOIT x86 linux samba overflow293 || EXPLOIT imap overflow294 || EXPLOIT imap x86 linux overflow295 || EXPLOIT imap x86 linux overflow296 || EXPLOIT imap x86 linux overflow297 || EXPLOIT imap x86 linux overflow298 || EXPLOIT imap x86 linux overflow299 || EXPLOIT imap x86 linux overflow300 || EXPLOIT nlps x86 solaris overflow301 || EXPLOIT LPRng overflow302 || EXPLOIT redhat 7.0 lprd overflow303 || EXPLOIT named tsig infoleak304 || EXPLOIT sco calserver overflow305 || EXPLOIT delegate proxy overflow306 || EXPLOIT VQServer admin307 || EXPLOIT IRC client overflow308 || EXPLOIT NextFTP client overflow309 || EXPLOIT sniffit overflow310 || EXPLOIT x86 windows MailMax overflow311 || EXPLOIT netscape 4.7 unsucessful overflow312 || EXPLOIT ntpdx overflow attempt313 || EXPLOIT ntalkd x86 linux overflow314 || EXPLOIT BIND Tsig Overflow Attempt315 || EXPLOIT x86 linux mountd overflow316 || EXPLOIT x86 linux mountd overflow317 || EXPLOIT x86 linux mountd overflow318 || EXPLOIT bootp x86 bsd overflow319 || EXPLOIT bootp x86 linux overflow320 || FINGER backdoor321 || FINGER account enumeration322 || FINGER search attempt323 || FINGER root324 || FINGER null325 || FINGER probe0 attempt326 || FINGER pipew attempt327 || FINGER pipe attempt328 || FINGER bomb attempt329 || FINGER cybercop redirection330 || FINGER redirection331 || FINGER cybercop query332 || FINGER 0@host333 || FINGER .@host334 || FTP .forward335 || FTP .rhosts336 || FTP CWD ~root337 || FTP EXPLOIT aix overflow338 || FTP EXPLOIT format string339 || FTP EXPLOIT openbsd ftpd340 || FTP EXPLOIT overflow341 || FTP EXPLOIT overflow342 || FTP EXPLOIT solaris 2.8 format string343 || FTP EXPLOIT wu-ftpd 2.6.0 bsd344 || FTP EXPLOIT wu-ftpd 2.6.0 linux overflow345 || FTP EXPLOIT wu-ftpd 2.6.0 site exec overflow346 || FTP EXPLOIT wu-ftpd 2.6.0 site exec overflow347 || FTP EXPLOIT wu-ftpd 2.6.0 tf8348 || FTP EXPLOIT wu-ftpd 2.6.0349 || FTP EXPLOIT x86 linux overflow350 || FTP EXPLOIT x86 linux overflow351 || FTP EXPLOIT x86 linux overflow352 || FTP EXPLOIT x86 linux overflow353 || FTP adm scan354 || FTP iss scan355 || FTP pass wh00t356 || FTP passwd retreval attempt357 || FTP piss scan358 || FTP saint scan359 || FTP satan scan360 || FTP serv-u directory transversal361 || FTP site exec362 || FTP tar parameters363 || ICMP IRDP router advertisement364 || ICMP IRDP router selection365 || ICMP PING (Undefined Code!)366 || ICMP PING *NIX367 || ICMP PING BSDtype368 || ICMP PING BSDtype369 || ICMP PING BayRS Router370 || ICMP PING BeOS4.x371 || ICMP PING Cisco Type.x372 || ICMP PING Delphi-Piette Windows373 || ICMP PING Flowpoint2200 or Network Management Software374 || ICMP PING IP NetMonitor Macintosh375 || ICMP PING LINUX/*BSD376 || ICMP PING Microsoft Windows377 || ICMP PING Network Toolbox 3 Windows378 || ICMP PING Ping-O-MeterWindows379 || ICMP PING Pinger Windows380 || ICMP PING Seer Windows381 || ICMP PING Sun Solaris382 || ICMP PING Windows383 || ICMP PING from Flowpoint2200 or Network Management Software384 || ICMP PING385 || ICMP traceroute 386 || ICMP Address Mask Reply387 || ICMP Address Mask Reply (Undefined Code!)388 || ICMP Address Mask Request389 || ICMP Address Mask Request (Undefined Code!)390 || ICMP Alternate Host Address391 || ICMP Alternate Host Address (Undefined Code!)392 || ICMP Datagram Conversion Error393 || ICMP Datagram Conversion Error (Undefined Code!)394 || ICMP Destination Unreachable (Destination Host Unknown)395 || ICMP Destination Unreachable (Destination Network Unknown)396 || ICMP Destination Unreachable (Fragmentation Needed and DF bit was set)397 || ICMP Destination Unreachable (Host Precedence Violation)398 || ICMP Destination Unreachable (Host Unreachable for Type of Service)399 || ICMP Destination Unreachable (Host Unreachable)400 || ICMP Destination Unreachable (Network Unreachable for Type of Service)401 || ICMP Destination Unreachable (Network Unreachable)402 || ICMP Destination Unreachable (Port Unreachable)403 || ICMP Destination Unreachable (Precedence Cutoff in effect)404 || ICMP Destination Unreachable (Protocol Unreachable)405 || ICMP Destination Unreachable (Source Host Isolated)406 || ICMP Destination Unreachable (Source Route Failed)407 || ICMP Destination Unreachable (Undefined Code!)408 || ICMP Echo Reply409 || ICMP Echo Reply (Undefined Code!)410 || ICMP Fragment Reassembly Time Exceeded411 || ICMP IPV6 I-Am-Here412 || ICMP IPV6 I-Am-Here (Undefined Code!413 || ICMP IPV6 Where-Are-You414 || ICMP IPV6 Where-Are-You (Undefined Code!)415 || ICMP Information Reply416 || ICMP Information Reply (Undefined Code!)417 || ICMP Information Request418 || ICMP Information Request (Undefined Code!)419 || ICMP Mobile Host Redirect420 || ICMP Mobile Host Redirect (Undefined Code!)421 || ICMP Mobile Registration Reply422 || ICMP Mobile Registration Reply (Undefined Code!)423 || ICMP Mobile Registration Request424 || ICMP Mobile Registration Request (Undefined Code!425 || ICMP Parameter Problem (Bad Length)426 || ICMP Parameter Problem (Missing a Requiered Option)427 || ICMP Parameter Problem (Unspecified Error)428 || ICMP Parameter Problem (Undefined Code!)429 || ICMP Photuris (Reserved)430 || ICMP Photuris (Unknown Security Parameters Index)431 || ICMP Photuris (Valid Security Parameters, But Authentication Failed)432 || ICMP Photuris (Valid Security Parameters, But Decryption Failed)433 || ICMP Photuris (Undefined Code!)434 || ICMP Redirect (Host)435 || ICMP Redirect (Network)436 || ICMP Redirect (for TOS and Host)437 || ICMP Redirect (for TOS and Network)438 || ICMP Redirect (Undefined Code!)439 || ICMP Reserved for Security (Type 19)440 || ICMP Reserved for Security (Type 19) (Undefined Code!)441 || ICMP Router Advertisment442 || ICMP Router Advertisment (Undefined Code!)443 || ICMP Router Selection444 || ICMP Router Selection (Undefined Code!)445 || ICMP SKIP446 || ICMP SKIP (Undefined Code!447 || ICMP Source Quench448 || ICMP Source Quench (Undefined Code!)449 || ICMP Time-To-Live Exceeded in Transit450 || ICMP Time-To-Live Exceeded in Transit (Undefined Code!)451 || ICMP Timestamp Reply452 || ICMP Timestamp Reply (Undefined Code!)453 || ICMP Timestamp Request454 || ICMP Timestamp Request (Undefined Code!)455 || ICMP Traceroute ipopts456 || ICMP Traceroute457 || ICMP Traceroute (Undefined Code!)458 || ICMP Unassigned! (Type 1)459 || ICMP Unassigned! (Type 1) (Undefined Code)460 || ICMP Unassigned! (Type 2)461 || ICMP Unassigned! (Type 2) (Undefined Code); itype: 2;)462 || ICMP Unassigned! (Type 7)463 || ICMP Unassigned! (Type 7) (Undefined Code!)464 || ICMP Unknown Type465 || ICMP ISS Pinger466 || ICMP L3retriever Ping467 || ICMP Nemesis v1.1 Echo468 || ICMP Nmap2.36BETA or HPING2 Echo 469 || ICMP PING NMAP470 || ICMP Sniffer Pro/NetXRay network scan471 || ICMP icmpenum v1.1.1472 || ICMP redirect host473 || ICMP redirect net474 || ICMP superscan echo475 || ICMP traceroute ipopts476 || ICMP webtrends scanner477 || ICMP Source Quench478 || ICMP Broadscan Smurf Scanner479 || ICMP PING IP NetMonitor Macintosh480 || ICMP PING speedera481 || ICMP TJPingPro1.1Build 2 Windows482 || ICMP PING WhatsupGold Windows483 || ICMP PING CyberKit 2.2 Windows⌨️ 快捷键说明
复制代码Ctrl + C
搜索代码Ctrl + F
全屏模式F11
增大字号Ctrl + =
减小字号Ctrl + -
显示快捷键?