Snort mailing list archives
spp_portscan
From: "James" <the_saint_james () yahoo com>
Date: Sun, 14 Oct 2001 21:26:30 -0600
[**] [100:2:1] spp_portscan: portscan status from 198.59.109.7: 17 connections across 12 hosts: TCP(0), UDP(17) [**] 10/14-21:23:32.119516 [**] [100:2:1] spp_portscan: portscan status from 198.59.109.7: 11 connections across 9 hosts: TCP(0), UDP(11) [**] 10/14-21:23:36.003740 [**] [100:2:1] spp_portscan: portscan status from 198.59.109.7: 15 connections across 14 hosts: TCP(0), UDP(15) [**] 10/14-21:23:40.015424 Getting lots of these, IP is always my primary NS. Is this something I could/should comment out and where do I do this ? James _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- SNORT USAGE Brian (Automail) (Oct 14)
- spp_portscan James (Oct 14)
- Re: spp_portscan James (Oct 14)
- <Possible follow-ups>
- SNORT USAGE Brian (Automail) (Oct 20)
- SNORT USAGE Brian (Automail) (Oct 27)
- SNORT USAGE Brian (Automail) (Nov 03)
- SNORT USAGE Brian (Automail) (Nov 10)
- SNORT USAGE Brian (Automail) (Nov 17)
- SNORT USAGE Brian (Automail) (Nov 24)
- SNORT USAGE Brian (Automail) (Dec 01)
- SNORT USAGE Brian (Automail) (Dec 08)
- SNORT USAGE Brian (Automail) (Dec 15)
(Thread continues...)
- spp_portscan James (Oct 14)