[Snort-users] DNS portscans

Ralf Hildebrandt Ralf.Hildebrandt at ...821...
Wed Mar 14 13:23:01 EST 2001

On Wed, Mar 14, 2001 at 09:50:36AM -0800, Bob Van Cleef wrote:
> The below scans have been showing up a lot lately as use of our VPN
> network grows.  The logs make it look like our DNS server / Web server is
> scanning our VPN network.

That might just be your DNS server answering queries.

ralf.hildebrandt at ...821...
System Engineer                                            innominate AG
Diplom-Informatiker                                 the linux architects
tel: +49.30.308806-62  fax: -698                      www.innominate.com

More information about the Snort-users mailing list