Snort mailing list archives

portscan2 - display which ports scanned in acid


From: "Andy Simpson" <Andy.Simpson () datgroup com>
Date: Wed, 17 Mar 2004 09:06:29 -0000

Hi,
 
Sorry if this question has alredy been posted...
 
Is there any way of getting Acid to show which ports were scanned in an
alert as per the spp_portscan2 output?
 
The entries work fine and display but I would like to be able to include
which hosts & ports were scanned.
 
 
Any ideas?
 
 

Cheers, Andy Simpson
 
_______________________________________

Andy Simpson

Senior Consultant

DAT Group

DDI:    +44 1580 831 642

Mobile: +44 7977 256 342

Email:   andy.simpson () datgroup com

 

Current thread: