[Snort-users] NMAP scans

Steve Murphy sdm2 at ...6875...
Tue Jun 24 06:59:14 EDT 2003

Is it possible to eliminate the massive number of alerts reported when
someone is sending NMAP scans to our network?  It would be nice to just
have one alert notifying me of someone scanning our IP range rather then
several thousand.

Any help is appreciated.

More information about the Snort-users mailing list