Firewall Wizards mailing list archives
Scan detection with FW-1
From: Lance Spitzner <lance () spitzner net>
Date: Thu, 16 Mar 2000 21:55:51 -0600 (CST)
For you FW-1 users (and potentially other firewalls) I've upgraded my Intrusion Detection Script (alert.sh). I've improved icmp and NAT logging/reporting and included an examples section with advance SAM capabilities. Also, some improvements have been made in performance. Nothing fancy, but it gets the job done :) As always, you can find it at http://www.enteract.com/~lspitz/intrusion.html Enjoy ... Lance Spitzner http://www.enteract.com/~lspitz/papers.html
Current thread:
- Scan detection with FW-1 Lance Spitzner (Mar 17)