Posted by breda on May 27, 2016; 5:57pm
URL: https://itus.accessinnov.com/Re-Help-with-determining-if-IPS-is-updateing-tp981p985.html

Hi, Roadrunnere42 thanks for getting back to me I will take look at the files here some are erorrs

hu May 26 01:01:15 2016 daemon.crit dnsmasq[12173]: illegal repeated keyword at line 13 of /var/etc/dnsmasq.conf
Thu May 26 01:01:15 2016 daemon.crit dnsmasq[12173]: FAILED to start up
Thu May 26 01:01:17 2016 daemon.err snort[11555]: *** Caught Term-Signal


Thu May 26 01:01:33 2016 daemon.notice snort[12216]: WARNING: flowbits key 'ET.Evil' is set but not ever checked.
Thu May 26 01:01:33 2016 daemon.notice snort[12216]: WARNING: flowbits key 'ETPRO.RTF' is set but not ever checked.
Thu May 26 01:01:33 2016 daemon.notice snort[12216]: WARNING: flowbits key 'et.MCOFF' is checked but not ever set.
Thu May 26 01:01:33 2016 daemon.notice snort[12216]: WARNING: flowbits key 'et.JavaArchiveOrClass' is checked but not ever set.
Thu May 26 01:01:33 2016 daemon.notice snort[12216]: WARNING: flowbits key 'et.http.PK' is checked but not ever set.
Thu May 26 01:01:33 2016 daemon.notice snort[12216]: WARNING: flowbits key 'et.WinHttpRequest' is checked but not ever set.
Thu May 26 01:01:33 2016 daemon.notice snort[12216]: WARNING: flowbits key 'ET.QuickenUpdater' is checked but not ever set.
Thu May 26 01:01:33 2016 daemon.notice snort[12216]: WARNING: flowbits key 'ET.wininet.UA' is checked but not ever set.
Thu May 26 01:01:33 2016 daemon.notice snort[12216]: WARNING: flowbits key 'et.MS.WinHttpRequest.no.exe.request' is checked but not ever set.
Thu May 26 01:01:33 2016 daemon.notice snort[12216]: WARNING: flowbits key 'ET.Adobe.Site.Download' is checked but not ever set.
Thu May 26 01:01:33 2016 daemon.notice snort[12216]: WARNING: flowbits key 'ET.CompIP' is set but not ever checked.
Thu May 26 01:01:33 2016 daemon.notice snort[12216]: WARNING: flowbits key 'ET.http.javaclient.SakuraPorts' is checked but not ever set.
Thu May 26 01:01:33 2016 daemon.notice snort[12216]: WARNING: flowbits key 'SunDown.EK' is set but not ever checked.
Thu May 26 01:01:33 2016 daemon.notice snort[12216]: WARNING: flowbits key 'ET.http.javaclient.vulnerable' is checked but not ever set.
Thu May 26 01:01:33 2016 daemon.notice snort[12216]: WARNING: flowbits key 'ET.RIGEKExploit' is set but not ever checked.
Thu May 26 01:01:33 2016 daemon.notice snort[12216]: WARNING: flowbits key 'ET.http.binary' is checked but not ever set.
Thu May 26 01:01:33 2016 daemon.notice snort[12216]: WARNING: flowbits key 'ET.http.rtf.download' is set but not ever checked.
Thu May 26 01:01:33 2016 daemon.notice snort[12216]: WARNING: flowbits key 'EXE2' is set but not ever checked.
Thu May 26 01:01:33 2016 daemon.notice snort[12216]: WARNING: flowbits key 'ET.ZoneAlarm.Site.Download' is checked but not ever set.
Thu May 26 01:01:33 2016 daemon.notice snort[12216]: WARNING: flowbits key 'ET.http.javaclient' is checked but not ever set.
Thu May 26 01:01:33 2016 daemon.notice snort[12216]: WARNING: flowbits key 'et.MS.XMLHTTP.no.exe.request' is checked but not ever set.
Thu May 26 01:01:33 2016 daemon.notice snort[12216]: WARNING: flowbits key 'ET.DshieldIP' is set but not ever checked.
Thu May 26 01:01:33 2016 daemon.notice snort[12216]: WARNING: flowbits key 'ET.JS.Obfus.Func' is checked but not ever set.
Thu May 26 01:01:33 2016 daemon.notice snort[12216]: WARNING: flowbits key 'et.MS.XMLHTTP.ip.request' is checked but not ever set.
Thu May 26 01:01:33 2016 daemon.notice snort[12216]: WARNING: flowbits key 'ET.pdf.in.http' is checked but not ever set.
Thu May 26 01:01:33 2016 daemon.notice snort[12216]: WARNING: flowbits key 'ET.BotccIP' is set but not ever checked.
Thu May 26 01:01:33 2016 daemon.notice snort[12216]: WARNING: flowbits key 'NuclearEK' is set but not ever checked.
Thu May 26 01:01:33 2016 daemon.notice snort[12216]: WARNING: flowbits key 'AnglerEK' is set but not ever checked.
Thu May 26 01:01:33 2016 daemon.notice snort[12216]: WARNING: flowbits key 'et.DocVBAProject' is set but not ever checked.
Thu May 26 01:01:33 2016 daemon.notice snort[12216]: WARNING: flowbits key 'FlimKit.SWF.Redirect' is checked but not ever set.
Thu May 26 01:01:33 2016 daemon.notice snort[12216]: WARNING: flowbits key 'ET.CottonCastle.Exploit' is set but not ever checked.
Thu May 26 01:01:33 2016 daemon.notice snort[12216]: 81 out of 1024 flowbits in use.
Thu May 26 01:01:36 2016 daemon.crit dnsmasq[12225]: illegal repeated keyword at line 13 of /var/etc/dnsmasq.conf
Thu May 26 01:01:36 2016 daemon.crit dnsmasq[12225]: FAILED to start up
Thu May 26 01:01:41 2016 daemon.crit dnsmasq[12226]: illegal repeated keyword at line 13 of /var/etc/dnsmasq.conf
Thu May 26 01:01:41 2016 daemon.crit dnsmasq[12226]: FAILED to start up
Thu May 26 01:01:41 2016 daemon.info procd: Instance dnsmasq::instance1 s in a crash loop 6 crashes, 0 seconds since last crash
Thu May 26 01:02:21 2016 daemon.notice snort[12216]:
Thu May 26 01:02:21 2016 daemon.notice snort[12216]: [ Port Based Pattern Matching Memory ]