QNAP talking to 23.44.101.159 - snort blocking it

[ChrisD.]

Never mind, worked out that it's a CDN network and it's probably snort being a little noisy.

 

[the-evaluator]

Yep, it's just one of the many IP addresses that Akami have.

The Qnap website is using Akami too. I think Snort is being a bit overzealous.

 

[ChrisD.]

I've added it to the suppress list now.

I need to work out how to get snort to show which internal IP the traffic is coming from, as it only shows the external:nat address which isn't much use.