spp_portscan to port 80

[Nicky Davey <daveyn2002 () yahoo com au>]

Hi,

I have set up snort and my portscan.log file is full
of spp_portscans from my internal addresses to outside
addresses on port 80. I put this down to normal http
traffic, is it normal and why does it happen?

Thank you.

http://movies.yahoo.com.au - Yahoo! Movies
- Vote for your nominees in our online Oscars pool.

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users