Snort mailing list archives
Another question
From: Tommy Tsilalis <Thomas.Tsilalis () newcastle ac uk>
Date: Sun, 12 May 2002 00:19:40 +0100
This is another Snort output. [**] [100:1:1] spp_portscan: PORTSCAN DETECTED from 192.168.0.2 (THRESHOLD 4 connections exceeded in 0 seconds) [**] I suppose that spp_portscan is the Snort function which identifies or checks for portscans. What does the following mean? [100:1:1] Thanks again. Thomas Tsilalis _______________________________________________________________ Have big pipes? SourceForge.net is looking for download mirrors. We supply the hardware. You get the recognition. Email Us: bandwidth () sourceforge net _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Another question Tommy Tsilalis (May 11)
- Re: Another question Ashley Thomas (May 11)