[Snort-users] ACID: Portscan Traffic value distorted

Anthony Cable ant_cable at ...131...
Fri Sep 3 11:13:01 EDT 2004


Hello folks,
I'm using ACID and I have three Snort sensors reporting to a database.  In the "Traffic Profile by Protocol" section the Portscan Traffic is roughly 75% even if there are only a few alerts in this category.  It's not a major issue, it's just very annoying.  Any help will be greatly appreciated:
 
Software Version
Snort: 2.1
mysql 4.0.18
acid-0.9.6b23 
 
Thanks,
Anthony

		
---------------------------------
Do you Yahoo!?
Win 1 of 4,000 free domain names from Yahoo! Enter now.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20040903/566013cc/attachment.html>


More information about the Snort-users mailing list