[Snort-users] spp_portscan from DNS servers

Mike Walter mike at ...3781...
Thu Oct 11 08:53:12 EDT 2001


Hello,
	I have installed and configured Snort and ACID.  I followed the Doc on configuring my DNS servers in the snort.conf.  I have added the DNS servers with a /32 as suggested in the SNORT FAQ.  I am still receiving a lot of spp_portscan from my two DNS servers.  Any thoughts?  What am I missing?

Mike Walter,
3z.net a PCD Company,
PCD Network Solutions, Inc,
�When Success the Only Solution  t h i n K  3z.net�
www.pcdnet.net
www.3z.net







More information about the Snort-users mailing list