snort shows the following:
[**] WEB-CGI search.cgi access [**]
04/25-01:18:06.757263 61.214.146.46:1531 -> 192.168.0.75:80
TCP TTL:107 TOS:0x0 ID:9905 IpLen:20 DgmLen:381 DF
***AP*** Seq: 0x14A99C72 Ack: 0xFCAC3451 Win: 0x40E8 TcpLen: 20
47 45 54 20 68 74 74 70 3A 2F 2F 77 77 77 32 2E GET
http://www2.
73 75 72 70 61 72 61 2E 63 6F 6D 2F 63 67 69 2F surpara.com/cgi/
73 65 61 72 63 68 2E 63 67 69 3F 50 3D 34 26 74 search.cgi?P=4&t
79 70 65 3D 61 6E 64 26 67 72 3D 6F 6E 26 73 68 ype=and&gr=on&sh
6F 77 3D 31 30 26 73 65 61 72 63 68 3D 26 4A 3D ow=10&search=&J=
4B 59 4F 20 48 54 54 50 2F 31 2E 30 0D 0A 41 63 KYO HTTP/1.0..Ac
63 65 70 74 3A 20 69 6D 61 67 65 2F 67 69 66 2C cept: image/gif,
20 69 6D 61 67 65 2F 78 2D 78 62 69 74 6D 61 70 image/x-xbitmap
2C 20 69 6D 61 67 65 2F 6A 70 65 67 2C 20 69 6D , image/jpeg, im
61 67 65 2F 70 6A 70 65 67 2C 20 61 70 70 6C 69 age/pjpeg, appli
63 61 74 69 6F 6E 2F 78 2D 73 68 6F 63 6B 77 61 cation/x-shockwa
76 65 2D 66 6C 61 73 68 2C 20 2A 2F 2A 0D 0A 41 ve-flash, */*..A
63 63 65 70 74 2D 4C 61 6E 67 75 61 67 65 3A 20 ccept-Language:
6A 61 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 ja..User-Agent:
4D 6F 7A 69 6C 6C 61 2F 34 2E 30 20 28 63 6F 6D Mozilla/4.0 (com
70 61 74 69 62 6C 65 3B 20 4D 53 49 45 20 36 2E patible; MSIE 6.
30 3B 20 57 69 6E 64 6F 77 73 20 39 38 3B 20 57 0; Windows 98; W
69 6E 20 39 78 20 34 2E 39 30 29 0D 0A 48 6F 73 in 9x 4.90)..Hos
74 3A 20 77 77 77 32 2E 73 75 72 70 61 72 61 2E t: www2.surpara.
63 6F 6D 0D 0A 50 72 6F 78 79 2D 43 6F 6E 6E 65 com..Proxy-Conne
63 74 69 6F 6E 3A 20 4B 65 65 70 2D 41 6C 69 76 ction: Keep-Aliv
65 0D 0A 0D 0A e....
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
"..Proxy-Connection: Keep-Alive" - does not sound good huh.
Anyone know for sure what this snort log means?
