Snort mailing list archives

port scans


From: Sidharth Deshpande <sade_in () yahoo com>
Date: Mon, 27 Dec 2004 06:38:33 -0800 (PST)

Hello team,
 
I am running snort on a test network. I was interested to know if snort can detect port scans that are extremely slow. 
Port scans that span over a few days for example.
 
Is there a way for snort to identify this kind of scan?
 
I hope you could help me out with this information.
 
Thanks
 
Sidharth Deshpande

                
---------------------------------
Do you Yahoo!?
 Take Yahoo! Mail with you! Get it on your mobile phone.

Current thread: