![snort logo](/images/snort-logo.png)
Snort mailing list archives
My Machine as Source
From: Mark Sargent <powderkeg () snow email ne jp>
Date: Thu, 14 Apr 2005 15:46:21 +0900
Hi All,just started using Snort/Base on a test machine, although, the machine is part of a LAN/Internet setup. I'm using it just to learn the basics etc. Anyway, I see my machine, 192.168.0.12 as the source address for (portscan) Open Port on addresses on the net, for example, 203.26.51.42 <http://localhost/base-1.1/base_stat_ipaddr.php?ip=203.26.51.42&netmask32>. Why is that..? More so, what is it..? False alrms, perhaps.? A zombie, perhaps..? Cheers.
Mark Sargent. ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- My Machine as Source Mark Sargent (Apr 13)
- <Possible follow-ups>
- RE: My Machine as Source Briggs, Bruce (Apr 14)