scan detector

[CyberPsychotic <mlists () gizmo kyrnet kg>]

hi folks,
I've just pulled some work into stealth scan detecting daemon:
http://www.kalug.lug.net/tcplogd/. It should detect most of nmap
sX/sN/sS scans. I am thinking of making the piece a bit more active by
spoofing fake responces to the sender, which should mess up the scanning
party, but this could be vulneriable to various smurf attacks probably.
I would like to hear some feedback, if anyone cares..;-)

regards
        ~Fyodor

--
fygrave () tigerteam net                http://www.kalug.lug.net