[Snort-users] verbose spp_portscan logging.

Joseph Nicholas Yarbrough nyarbrough at ...262...
Thu Sep 21 06:54:54 EDT 2000


Hello,

I can't seem to find anything in the source for spp_portscan to allow verbose
logging. We want to put in the hosts being scanned and what ports. Also, is it
possible that a lot of udp traffic will trigger a upd portscan alert? or is the
ip portion what spp_portscan is responding to?

-Nick



More information about the Snort-users mailing list