[Snort-devel] portscan?

Lukasz Gogolewski lucas at ...830...
Fri Sep 21 08:00:01 EDT 2001


Does it mean that my machine runs portscan?

[**] [100:1:1] spp_portscan: PORTSCAN DETECTED from xxxxxxxxxxxx (THRESHOLD 4 connections exceeded in 2 seconds) [**]
09/21-10:18:05.851650

[**] [100:2:1] spp_portscan: portscan status from xxxxxxxxxxxxxx: 7 connections across 7 hosts: TCP(6), UDP(1) [**]
09/21-10:18:09.130737

Lucas

-- 
Lukasz Gogolewski - lucas at ...830...
Tel: 718.894.7858 - Fax: 718.504.4822
SupremeDesigns    - www.supremedesigns.com




More information about the Snort-devel mailing list