Home page logo
/

snort logo Snort mailing list archives

PSNG_ICMP_PORTSWEEP
From: waldo kitty <wkitty42 () windstream net>
Date: Fri, 08 Oct 2010 13:33:05 -0400


the following are hypothetical questions but ones that i run into all the time 
and have yet to find any explanation or answers for...


1. what is PSNG?

2. should i really be concerned about this type or port sweep? why?

3. should i be concerned about it if it is originating on my network? why?

4. why would the alert be showing that it is related to one address but tcpdump 
shows it is related to another but the last octet number is different?

   ie: 1.2.3.1 shown in alert but 1.2.3.134 is in the tcpdump capture



------------------------------------------------------------------------------
Beautiful is writing same markup. Internet Explorer 9 supports
standards for HTML5, CSS3, SVG 1.1,  ECMAScript5, and DOM L2 & L3.
Spend less time writing and  rewriting code and more time creating great
experiences on the web. Be a part of the beta today.
http://p.sf.net/sfu/beautyoftheweb
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


  By Date           By Thread  

Current thread:
  • PSNG_ICMP_PORTSWEEP waldo kitty (Oct 08)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]