[Snort-users] NMAP portscan detection

alireza at ...7551... alireza at ...7551...
Sun Dec 1 07:02:09 EST 2002


HI All

i was intslled snort and acid yesterday
when i want to test the ids with nmap
it can not detect the port scan progress
It logs tcp attack and Signature that
it display such az:

STEALTH ACTIVITY (NULL scan) detection
NMAP FINGERPRINT (stateful) detection
STEALTH ACTIVITY (XMAS scan) detection

i want to know why it is not log
that on Portscan trafic

and what kind of attack that log to
"Portsan traffic" section in ACID.

Thax in advance
Alireza






More information about the Snort-users mailing list