On Tue, 20 May 2003, David Vasil wrote: > On Tue, May 20, 2003 at 02:54:36PM -0500, [EMAIL PROTECTED] wrote: > > yes not found in the data directory. > > yes not found in the data directory. > > ERROR: yes not found on remote server > > ERROR: Can't download yes from clamav.elektrapro.com > > Not sure if this is anything related, but 'yes' is a binary > that repeats a string until the process is killed. > > Do you have the binary 'yes' installed on your system?
I forgot I could use snort as a psuedo stand-in replacement for a nce GUI traffic analyzer. =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 05/20-15:25:26.918868 65.66.95.179:35508 -> 62.149.225.70:80 TCP TTL:64 TOS:0x0 ID:17555 IpLen:20 DgmLen:180 DF ***AP*** Seq: 0xBF67F961 Ack: 0x4990242F Win: 0x16D0 TcpLen: 32 TCP Options (3) => NOP NOP TS: 4636161 136753927 GET /database/yes HTTP/1.1..Host: clamav.elektrapro.com..User-Ag ent: clamav/0.54..Cache-Control: no-cache..Connection: close.... =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ <SNIP> =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 05/20-15:25:27.098580 62.149.225.70:80 -> 65.66.95.179:35508 TCP TTL:39 TOS:0x0 ID:38713 IpLen:20 DgmLen:614 DF ***AP*** Seq: 0x4990242F Ack: 0xBF67F9E1 Win: 0x16A0 TcpLen: 32 TCP Options (3) => NOP NOP TS: 136753944 4636161 HTTP/1.1 404 Not Found..Date: Tue, 20 May 2003 20:26:42 GMT..Ser ver: Apache/1.3.27 (Unix) (Red-Hat/Linux) mod_ssl/2.8.12 OpenSS L/0.9.6b DAV/1.0.2 PHP/4.1.2 mod_perl/1.26..Connection: close..T ransfer-Encoding: chunked..Content-Type: text/html; charset=iso- 8859-1....11c..<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN" >.<HTML><HEAD>.<TITLE>404 Not Found</TITLE>.</HEAD><BODY>.<H1>No t Found</H1>.The requested URL /database/yes was not found on th is server.<P>.<HR>.<ADDRESS>Apache/1.3.27 Server at clamav.elekt rapro.com Port 80</ADDRESS>.</BODY></HTML>...0.... =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ /database/yes doesn't exist on clamav.elektrapro.com. I guess that answers that question. Now I have to ask if anyone knows when it will be fixed? I'm not sure what that file contains. Perhaps it's auto-generated and I just happened to catch it in the middle of that generation. Beats me though. Justin --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
