[Snort-devel] scan not detected

rmkml rmkml at ...1042...
Sun Feb 8 14:12:02 EST 2004


I receive tonight

this scan (join tcpdump file)

Why snort not detected this ?

(use snort v1.9x, v2.0x, v2.1x)

possible I have bad conf, but I post tcpdump/pcap record.


Rmkml at ...2334...

PS: Prelude have detected this scan
-------------- next part --------------
A non-text attachment was scrubbed...
Name: scan-68.85.149.tcpdump.gz
Type: application/octet-stream
Size: 1233 bytes
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20040208/b5547299/attachment.obj>

More information about the Snort-devel mailing list