Snort mailing list archives
spp_portscan to port 80
From: Nicky Davey <daveyn2002 () yahoo com au>
Date: Fri, 22 Feb 2002 03:48:43 +1100 (EST)
Hi, I have set up snort and my portscan.log file is full of spp_portscans from my internal addresses to outside addresses on port 80. I put this down to normal http traffic, is it normal and why does it happen? Thank you. http://movies.yahoo.com.au - Yahoo! Movies - Vote for your nominees in our online Oscars pool. _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- spp_portscan to port 80 Nicky Davey (Feb 21)
- <Possible follow-ups>
- Re: spp_portscan to port 80 Nicky Davey (Feb 21)