RE: detecting Portscans

["Neal Timm" <ntimm () austin rr com>]

fixed put new version of libpcap and recompiled snort to be sure.

-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net]On Behalf Of Neal Timm
Sent: Friday, August 31, 2001 12:23 AM
To: Snort-Userst@Lists. Sourceforge. Net
Subject: [Snort-users] detecting Portscans


Snort is not picking up Portscans running new version on redhat 7.1 logging
to syslog picks up other alerts like ICMP during portscan but doesn't detect
portscan using libpcap 0.4.39
libnet-1.0.2a.
Any ideas conf file is set up properly.


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users