[Snort-users] spp_portscan to port 80

Nicky Davey daveyn2002 at ...3162...
Thu Feb 21 08:49:06 EST 2002


I have set up snort and my portscan.log file is full
of spp_portscans from my internal addresses to outside
addresses on port 80. I put this down to normal http
traffic, is it normal and why does it happen?

Thank you.

http://movies.yahoo.com.au - Yahoo! Movies
- Vote for your nominees in our online Oscars pool.

More information about the Snort-users mailing list