Feb 20 11:53:08 myhost snort: 2/20-11:53:08.057888  [**] [1:1287:5] WEB-IIS snort scripts access [**] [Classification: access to a potentially vulnerable web application] [Priority: 2] {TCP}  192.168.1.1:12245 -> 192.168.1.2:80
