Snort mailing list archives

spp_portscan / unknown IP


From: "Gosswiler Bjoern" <Bjoern.Gosswiler () c-channel net>
Date: Fri, 25 Apr 2003 11:43:16 +0200

Hi all

Can someone explane me what this errors mean????

----------------------------------------------------------
spp_portscan detected from 212.8.128.114 (THRESHOLD 4 connections
exceeded in 0 seconds) 212.8.128.114  unknown  IP     

spp_portscan from 212.8.128.114: 6 connections across 2 hosts: TCP(6),
UDP(0)  212.8.128.114            unknown   IP    

spp_portscan from 212.8.128.114: 6 connections across 2 hosts: TCP(6),
UDP(0)  212.8.128.114             unknown  IP  
-----------------------------------------------------------

Björn    

Attachment: smime.p7s
Description:


Current thread: