[Snort-users] spp_portscan msg

DICEJ at ...6041... DICEJ at ...6041...
Tue Jun 11 08:31:25 EDT 2002


I recently began using snort and I'm trying to sort out the msg
you get.  One that keeps comming up is a spp_portscan.  I can not find
the alert that records the msg. any idea?  I know this is a false because the 
machine identified in the error is my nat/firewall external interface.
Thanks




More information about the Snort-users mailing list