[Snort-users] Port scanning

Erek Adams erek at ...577...
Mon Sep 17 12:17:29 EDT 2001


On Mon, 17 Sep 2001, Subba Rao wrote:

[...snip...]

> Now, I dial to the Internet using another system and run a portscan on the
> Snort box. All I am seeing is some ICMP "Echo Reply" logged into the "alerts"
> file. There is nothing logged into "portscan.log" while the ipchains is logging
> each port connect attempt into syslog.

[...snip...]

Actually, a little research gives this answer:

http://snort.sourcefire.com/docs/faq.html#4.3

:)  Guess I was right!

-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net





More information about the Snort-users mailing list