[Snort-users] Vecna Scan ....
Peter.Charbonneau at ...1479...
Mon Jan 7 05:26:06 EST 2002
I have a snort installation (1.7.x) in series with my internet connection.
I also have a "local" installation on my XP workstation. My local
installation picked up the alerts below, but my IP address is NEITHER
220.127.116.11 nor 18.104.22.168.
The 1.7.x NIDS does not show the Vecna Scan - no rule for it; I am on a
totally switched network - my question is HOW IN THE HECK CAN MY HIDS SEE
I have googled "vecna scan" and haven't come up with anything of import.
Can anyone point me in the right direction to solve this?
Sr. Network and Systems Administrator
(413) 597-3408 (desk)
(413) 822-2922 (cell)
(209) 391-9821 (fax)
More information about the Snort-users