On Wed, 25 Oct 2000, Brian Caswell wrote: > GIAC (http://www.sans.org/giac.htm) is probably the best place that I have seen > when it comes > to handling incidents. I checked (9:33PM EST) and didn't see anything mentioning > these portscans. GIAC really needs to setup a mailing list for 'detects analyzed'. -Dan