Re: Normal amount of pinging?

[James Marks <jamarks () easystreet com>]

Ahh. So 50 "ICMP PING NMAP" events on my firewall means this is just 
the beginning for my tiny but growing number of unannounced visitors... 
 :)

Thanks!

On Jul 20, 2004, at 6:42 AM, Miner, Jonathan W (CSC) (US SSA) wrote:

> Normal? :)
>
> Just for comparison... in the last 24 hours, I've picked up 8600 "ICMP 
> PING NMAP" events out of 57000 total Snort events, using the default 
> rule set.
>
>
> -----Original Message-----
> From:   snort-users-admin () lists sourceforge net on behalf of James Marks
> Sent:   Fri 07/16/2004 10:24 PM
> To:     snort-users () lists sourceforge net
> Cc:     
> Subject:        [Snort-users] Normal amount of pinging?
> Can anyone tell me what a "normal" amount of nmap pinging activity is
> for a static IP?
>
> I'm using Snort in conjuction with IPCop for my firewall and I'm seeing
> about 50 nmap pings (as well as a few portscans) a day in my intrusion
> detection system logs.
>
> Thanks!
>
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by BEA Weblogic Workshop
> FREE Java Enterprise J2EE developer tools!
> Get your free copy of BEA WebLogic Workshop 8.1 today.
> http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------
This SF.Net email is sponsored by OSTG. Have you noticed the changes on
Linux.com, ITManagersJournal and NewsForge in the past few weeks? Now,
one more big change to announce. We are now OSTG- Open Source Technology
Group. Come see the changes on the new OSTG site. www.ostg.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users