Strange Snort alert:"A Network Trojan Was Detected"

[johnpoz]

^ ah that makes sense thanks bmeeks

[sensemann]

Hi, I have the same snort message. How can I find out, what domain is queried?

[bmeeks]

@sensemann:

Hi, I have the same snort message. How can I find out, what domain is queried?

You would have to enable full packet logging and then run the captured data through a sniffer tool such as Wireshark.

Bill