Snort mailing list archives
Re: how to disable spp_porscan?
From: robe () alfa21 com (Roberto Suarez Soto)
Date: Fri, 21 Dec 2001 10:19:40 +0100
On Dec/20, Phil Wood wrote:
The important point is, there is no way portscan will get started UNLESS you make it happen. In this case, I think you did something like ls > your high level include file and did not realize you had another conf file in the directory. You
That was *RIGHT* the case. I use a semi-automatic script to download rules from snort's homepage and debianize them, and that was a bit left from the last upgrade of the script. I've removed that line, and now, as it should, it doesn't detect portscans. Thank you very much for your help. I'm just sorry I didn't realize myself of such a stupid error O:-) -- Roberto Suarez Soto Alfa21 Outsourcing robe () alfa21 com http://www.alfa21.com _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- how to disable spp_porscan? Roberto Suarez Soto (Dec 18)
- Re: how to disable spp_porscan? Chris Green (Dec 18)
- Re: how to disable spp_porscan? Roberto Suarez Soto (Dec 18)
- Re: how to disable spp_porscan? Phil Wood (Dec 18)
- Re: how to disable spp_porscan? Roberto Suarez Soto (Dec 19)
- Re: how to disable spp_porscan? Phil Wood (Dec 19)
- Re: how to disable spp_porscan? Roberto Suarez Soto (Dec 20)
- Re: how to disable spp_porscan? Phil Wood (Dec 20)
- Re: how to disable spp_porscan? Phil Wood (Dec 20)
- Re: how to disable spp_porscan? Roberto Suarez Soto (Dec 21)
- Re: how to disable spp_porscan? Roberto Suarez Soto (Dec 18)
- Re: how to disable spp_porscan? Chris Green (Dec 18)
- Re: how to disable spp_porscan? Roberto Suarez Soto (Dec 18)
- <Possible follow-ups>
- RE: how to disable spp_porscan? Steve Halligan (Dec 18)
- Re: how to disable spp_porscan? Roberto Suarez Soto (Dec 18)
- Re: how to disable spp_porscan? Chris Green (Dec 18)
- Re: how to disable spp_porscan? Roberto Suarez Soto (Dec 19)
- Re: how to disable spp_porscan? Phil Wood (Dec 19)
- Re: how to disable spp_porscan? Roberto Suarez Soto (Dec 20)
- Re: how to disable spp_porscan? Roberto Suarez Soto (Dec 18)
- Re: how to disable spp_porscan? Brian (Dec 19)
- Re: how to disable spp_porscan? Roberto Suarez Soto (Dec 19)