[Snort-users] Snort log help!

Peter Rodger prodger2008 at ...131...
Thu Oct 6 14:12:08 EDT 2005

Hi all,

Today, I put snort behind PIX (port spanning from PIX
port to snort monitoring port) as follows:

#19-(1-15529) [snort] (portscan) TCP Portscan
2005-10-06 16:26:40 x.x.x.x Raw IP  
(x.x.x.x is externel IP)

Does this mean x.x.x.x scan this IP?  or just false

I'll appreciate your help.


Yahoo! Mail - PC Magazine Editors' Choice 2005 

More information about the Snort-users mailing list