Snort mailing list archives

No clue?


From: John Friedman <jfriedmanx () yahoo com>
Date: Fri, 11 Nov 2005 07:07:08 -0800 (PST)

Hi all,
 
I consistenly get these alerts from the Citrix server:
 
 [input]   ID  < Signature >  < Timestamp >  < Source Address >  < Dest. Address >  < Layer 4 Proto >     [input]      
[input]     #0-(2-4654)       [snort] spp_portscan: End of portscan from 10.1.10.6: TOTAL time(17s) hosts(2) TCP(5) 
UDP(0)       2005-11-11 09:59:09       10.1.10.6       unknown       IP        [input]      [input]     #1-(2-4653)     
  [snort] spp_portscan from 10.1.10.6: 5 connections across 2 hosts: TCP(5), UDP(0)       2005-11-11 09:58:20       
10.1.10.6       unknown       IP    

 

no clue what it does mean?  the destination IP is unknown and can anyone help me out?

 

Thanks,

 

John

                
---------------------------------
 Yahoo! FareChase - Search multiple travel sites in one click.  

Current thread: