[Snort-users] My Machine as Source

Mark Sargent powderkeg at ...11462...
Wed Apr 13 23:47:55 EDT 2005


Hi All,

just started using Snort/Base on a test machine, although, the machine 
is part of a LAN/Internet setup. I'm using it just to learn the basics 
etc. Anyway, I see my machine, 192.168.0.12 as the source address for 
(portscan) Open Port on addresses on the net, for example, 203.26.51.42 
<http://localhost/base-1.1/base_stat_ipaddr.php?ip=203.26.51.42&netmask32>. 
Why is that..? More so, what is it..? False alrms, perhaps.? A zombie, 
perhaps..? Cheers.

Mark Sargent.




More information about the Snort-users mailing list