Re: anyone else seen an increase in sunrpc scans these days?

[Cristian Dumitrescu <omega () LUMINA RO>]

You can use several programs, like snort ( the best in my opinion ) and
portsentry, or jou can just use something like:
/sbin/ipchains -A input -s 0/0 -d 0/0 111 -y -l
and it will be logged by the kernel ussualy in /var/log/messages.




Cristian Dumitrescu
Admin



On Tue, 16 Jan 2001, Digital Overdrive wrote:
> Just one question: How do you detect these scans ?
> I can't find anything in my logs, but I don't have programs like
> portsentry running. What can you (all) advice me ?
>
> Kind regards,
>
> Jan