Snort mailing list archives

spp_portscan


From: "James" <the_saint_james () yahoo com>
Date: Sun, 14 Oct 2001 21:26:30 -0600

[**] [100:2:1] spp_portscan: portscan status from 198.59.109.7: 17
connections across 12
 hosts: TCP(0), UDP(17) [**]
10/14-21:23:32.119516

[**] [100:2:1] spp_portscan: portscan status from 198.59.109.7: 11
connections across 9
hosts: TCP(0), UDP(11) [**]
10/14-21:23:36.003740

[**] [100:2:1] spp_portscan: portscan status from 198.59.109.7: 15
connections across 14
 hosts: TCP(0), UDP(15) [**]
10/14-21:23:40.015424

Getting lots of these, IP is always my primary NS. Is this something I
could/should comment out and where do I do this ?

James


_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: