Snort mailing list archives
PSNG_ICMP_PORTSWEEP
From: waldo kitty <wkitty42 () windstream net>
Date: Fri, 08 Oct 2010 13:33:05 -0400
the following are hypothetical questions but ones that i run into all the time and have yet to find any explanation or answers for... 1. what is PSNG? 2. should i really be concerned about this type or port sweep? why? 3. should i be concerned about it if it is originating on my network? why? 4. why would the alert be showing that it is related to one address but tcpdump shows it is related to another but the last octet number is different? ie: 1.2.3.1 shown in alert but 1.2.3.134 is in the tcpdump capture ------------------------------------------------------------------------------ Beautiful is writing same markup. Internet Explorer 9 supports standards for HTML5, CSS3, SVG 1.1, ECMAScript5, and DOM L2 & L3. Spend less time writing and rewriting code and more time creating great experiences on the web. Be a part of the beta today. http://p.sf.net/sfu/beautyoftheweb _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- PSNG_ICMP_PORTSWEEP waldo kitty (Oct 08)