Snort mailing list archives

Re: portscan2 - display which ports scanned in acid


From: "John Creegan" <jcreegan () questarweb com>
Date: Fri, 19 Mar 2004 10:17:00 -0600

Many people have had problems with this after upgrading to snort 2.1.x,
and no one has a solution for it yet.  What version of snort are you
running?

"Andy Simpson" <Andy.Simpson () datgroup com> 03/16/04 09:03AM >>>
Hi,
 
Sorry if this question has alredy been posted...
 
Is there any way of getting Acid to show which ports were scanned in
an
alert as per the spp_portscan2 output?
 
The entries work fine and display but I would like to be able to
include
which hosts & ports were scanned.
 
 
Any ideas?
 
 

Cheers, Andy Simpson
 
_______________________________________

Andy Simpson

Senior Consultant

DAT Group

DDI:    +44 1580 831 642

Mobile: +44 7977 256 342

Email:   andy.simpson () datgroup com 

 


This message (including any attachments) contains confidential 
information intended for a specific individual and purpose, 
and is protected by law.  If you are not the intended recipient,
you should delete this message and are hereby notified that any 
disclosure,copying, or distribution of this message, or the taking 
of any action based on it, is strictly prohibited.



-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: