Vecna Scan ....

[Peter Charbonneau <Peter.Charbonneau () williams edu>]

I have a snort installation (1.7.x) in series with my internet connection.
I also have a "local" installation on my XP workstation.  My local
installation picked up the alerts below, but my IP address is NEITHER
148.63.230.175 nor 137.165.38.56.

The 1.7.x NIDS does not show the Vecna Scan - no rule for it;  I am on a
totally switched network - my question is HOW IN THE HECK CAN MY HIDS SEE
THIS SCAN?

I have googled "vecna scan" and haven't come up with anything of import.
Can anyone point me in the right direction to solve this?


PeteC

Peter Charbonneau
Sr. Network and Systems Administrator
Williams College
(413) 597-3408 (desk)
(413) 822-2922 (cell)
(209) 391-9821 (fax)


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users