Security Basics mailing list archives

snort reports not understood


From: Glenn English <ghe () slsware com>
Date: Fri, 09 Dec 2005 17:19:18 -0700

Snort is saying (with many different IPs):

671  12.119.69.198    192.168.20.218   
  ICMP Destination Unreachable Communication Administratively Prohibited
 48  192.168.20.218   70.150.65.36     (portscan) UDP Portsweep

192.168.20.218 is my server on the DMZ. 
12... is in ATT. 
70... is in bellsouth. 

These messages don't make sense to me. Can anyone supply a cluebat?

-- 
Glenn English
ghe () slsware com
GPG ID: D0D7FF20


Current thread: