Snort mailing list archives
is there anyway of stoping this?
From: "Ben Johansen" <benj () intelisoft net>
Date: Thu, 31 May 2001 09:14:52 -0700
Hi All. I have looked at whitehats.com and found not direct reference to this portscan --start log view--- 05/31-01:53:39.840000 [**] spp_portscan: PORTSCAN DETECTED from 156.46.219.190 (STEALTH) [**] 05/31-01:54:32.255000 [**] spp_portscan: portscan status from 156.46.219.190: 1 connections across 1 hosts: TCP(1), UDP(0) STEALTH [**] 05/31-01:55:35.155000 [**] spp_portscan: End of portscan from 156.46.219.190: TOTAL time(0s) hosts(1) TCP(1) UDP(0) STEALTH [**] --end log view--- Can it be stopped? Is there a hole I have missed? Ben Johansen Newbie 3rd class _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: http://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- is there anyway of stoping this? Ben Johansen (May 31)
- Re: is there anyway of stoping this? Ryan Russell (May 31)
- <Possible follow-ups>
- Re: is there anyway of stoping this? roman (May 31)
- Re: is there anyway of stoping this? Neil Dickey (May 31)