Re: portscan2 - display which ports scanned in acid

["Marcin Laskowski" <cineklas () wp pl>]

http://acidlab.sourceforge.net/acid_faq.html#faq_b7


-------------------------------------
Greetings, Maxim



  ----- Original Message ----- 
  From: Andy Simpson 
  To: snort-users () lists sourceforge net 
  Sent: Tuesday, March 16, 2004 4:03 PM
  Subject: [Snort-users] portscan2 - display which ports scanned in acid


  Hi,

  Sorry if this question has alredy been posted...

  Is there any way of getting Acid to show which ports were scanned in an alert as per the spp_portscan2 output?

  The entries work fine and display but I would like to be able to include which hosts & ports were scanned.


  Any ideas?



  Cheers, Andy Simpson

  _______________________________________

  Andy Simpson

  Senior Consultant

  DAT Group

  DDI:    +44 1580 831 642

  Mobile: +44 7977 256 342

  Email:   andy.simpson () datgroup com