[spp_portscan]

[Gregory D Hough <mr6re9 () execulink com>]

Greetings group,

I have snort listening on my gateway nic and was curious about all the 
spp_portscan alerts logged from a win box inside the network. Mulling over 
the faq's I see how to ignore this host, but would like to know WHY first.

Can anyone offer a simple explanation as to WHY there are so many portscan 
alerts from this win box?

Thanks,

farmer6re9


-------------------------------------------------------
                   Bringing you mounds of caffeinated joy
                   >>>     http://thinkgeek.com/sf    <<<

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users