Snort mailing list archives
Re: [Somewhat OT] - Why would a web server ping me? (Bob McDowell)
From: Always Bishan <bishan4u () yahoo co uk>
Date: Tue, 11 Mar 2003 14:10:27 +0000 (GMT)
hi
get a ton of what I thought were false positives from spp_portscan2
me too.
Plus I get a lot of 443 and icmp type 8 directed at the proxy server that bounce off of the iptables firewall.
i get portscans invoked by spp_portscan2 from and towards port no. 80,53,25 . i don't have any clue why does any website,dns server or smtp server is showing a portscan for my network.? snort is also logging portscans from my network on these internet ports. but i'm not doing any portscans. i'm getting these alerts very often. i'm clueless @ this ne help? Bishan __________________________________________________ Do You Yahoo!? Everything you'll ever need on one web page from News and Sport to Email and Music Charts http://uk.my.yahoo.com ------------------------------------------------------- This SF.net email is sponsored by:Crypto Challenge is now open! Get cracking and register here for some mind boggling fun and the chance of winning an Apple iPod: http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0031en _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Re: [Somewhat OT] - Why would a web server ping me? (Bob McDowell) Always Bishan (Mar 11)