RE : port 22 scan

[Christophe Sahut <christophe.sahut () telindus fr>]

-----Message d'origine-----
> De : Gongya Yu [mailto:yu () dhcp-243-81 gongya net] 
> Envoyé : mardi 4 juin 2002 18:18
> À : snort-users () lists sourceforge net
> Objet : [Snort-users] port 22 scan

> Hi, all:
>      I keep getting port 22 scanning across the whole subnets. The
> source port is also 22.  The source ips are 203.198.176.51 (HK),
> 211.239.122.12 (KR) and 202.185.203.66 (MY).
>      Any tools outside can be used to specify the source port when
> doing scanning ?
>      Anyone has got the same scanning ?


Option -g of nmap can do that.

> thanks !!
> snort user

You're welcome...

-------------------------------------------
SAHUT Christophe
Security Engineer
Centre National de Compétences en Intégration Sécurité (CNCIS)
-------------------------------------------
Telindus
Parc Club des Sept Deniers, Bât. n°3
78 chemin des sept deniers
31200 Toulouse - France
--------------------------------------------
mailto : christophe.sahut () telindus fr
Tél. : +33 (0)5 34 40 91 20
Fax : +33 (0)5 34 40 91 21
Mobile : +33 (0)6 11 69 40 09
-------------------------------------------
For more information about our products and services, please visit our
website http://www.telindus.fr
--------------------------------------------
Secure Connectivity & Mobility


.



_______________________________________________________________

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users