RE: portscan2 - display which ports scanned in acid

["Andy Simpson" <Andy.Simpson () datgroup com>]

Thanks Maxim, i'll give it a go.
 
 
_______________________________________

Andy Simpson

Senior Consultant

DAT Group

DDI:    +44 1580 831 642

Mobile: +44 7977 256 342

Email:   andy.simpson () datgroup com


  _____  

        From: Marcin Laskowski [mailto:cineklas () wp pl] 
        Sent: 19 March 2004 15:40
        To: Andy Simpson; snort-users () lists sourceforge net
        Subject: Re: [Snort-users] portscan2 - display which ports
scanned in acid
        
        
        http://acidlab.sourceforge.net/acid_faq.html#faq_b7
         
         
        -------------------------------------
        Greetings, Maxim
         
         
         

                ----- Original Message ----- 
                From: Andy Simpson <mailto:Andy.Simpson () datgroup com>  
                To: snort-users () lists sourceforge net 
                Sent: Tuesday, March 16, 2004 4:03 PM
                Subject: [Snort-users] portscan2 - display which ports
scanned in acid

                Hi,
                 
                Sorry if this question has alredy been posted...
                 
                Is there any way of getting Acid to show which ports
were scanned in an alert as per the spp_portscan2 output?
                 
                The entries work fine and display but I would like to be
able to include which hosts & ports were scanned.
                 
                 
                Any ideas?
                 
                 
                
                Cheers, Andy Simpson
                 
                _______________________________________

                Andy Simpson

                Senior Consultant

                DAT Group

                DDI:    +44 1580 831 642

                Mobile: +44 7977 256 342

                Email:   andy.simpson () datgroup com