[Snort-users] spp_portscan

James the_saint_james at ...131...
Sun Oct 14 20:27:01 EDT 2001


[**] [100:2:1] spp_portscan: portscan status from 198.59.109.7: 17
connections across 12
 hosts: TCP(0), UDP(17) [**]
10/14-21:23:32.119516

[**] [100:2:1] spp_portscan: portscan status from 198.59.109.7: 11
connections across 9
hosts: TCP(0), UDP(11) [**]
10/14-21:23:36.003740

[**] [100:2:1] spp_portscan: portscan status from 198.59.109.7: 15
connections across 14
 hosts: TCP(0), UDP(15) [**]
10/14-21:23:40.015424

Getting lots of these, IP is always my primary NS. Is this something I
could/should comment out and where do I do this ?

James


_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com





More information about the Snort-users mailing list