Date: Fri, 21 Jan 2000 21:40:50 -0600 (CST)
From: ids@honeynet.org
To: admin@honeynet.org
Subject: --- Firewall Scan Alert ---


You have received this message because someone is potentially 
scanning your systems.  The information below is the packet 
that was logged by the Firewall. This is email alert number 
1, with a limit of 5 from evil-hacker.example.com.

        ----- CRITICAL INFORMATION -----

        Date:        21Jan2000
        Time:        21:40:49
        Source:      evil-hacker.example.com
        Destination: victim8-ext
        Service:     telnet

        ----- ACTUAL FW-1 LOG ENTRY -----

21Jan2001 21:40:49 accept lisa-int   >qfe1 useralert proto tcp 
src evil-hacker.example.com dst victim8-ext service telnet s_port 
1818 len 44 rule 12 xlatesrc evil-hacker.example.com xlatedst 
victim8-int xlatesport 1818 xlatedport telnet