Re: Portscan Detector in Snort 2.8

[Joel Esler <joel.esler () sourcefire com>]

sfPortscan

http://www.snort.org/docs/snort_htmanuals/htmanual_280/node58.html

--
joel esler
http://demo.sourcefire.com/jesler.pgp.key



On Oct 22, 2007, at 10:30 AM, Bill Warren wrote:

> I know in Sort 2.4, the preprocessor portscan2 is still in the code  
> and
> will detect portscans.  Is there still preprocessor in Snort 2.8 to
> detect portscans?
>
> Thanks,
> Bill
>
>
>
>
> ---------------------------------------------------------------------- 
> ---
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems?  Stop.
> Now Search log events and configuration files using AJAX and a  
> browser.
> Download your FREE copy of Splunk now >> http://get.splunk.com/
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users