Re: snort opens ports?

[John Sage <jsage () finchhaven com>]

You may be refering to portsentry.

See: http://www.psionic.com/abacus/portsentry

"Runs on TCP and UDP sockets to detect port scans
  against your system. PortSentry is configurable to run on multiple
  sockets at the same time so you only need to start one copy to
  cover dozens of tripwired services."


- John


--
Computers: they're really nothing but l's and O's



fuc952d () tninet se wrote:

> I read on  another mailing list,  that "according to the faq"  snort attaches
> dummy services to the ports it monitors so they may appear to be open.
>
> this sounds distinctly incorrect to me.... is there any mode in which this
> could be true?
>
> --




_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users