Re: [Snort-sigs] Quick Nachi ICMP rule -variants?

From: Johnathan Norman <jnorman(at)alertlogic.net>
Date: Fri Aug 29 2003 - 08:50:34 EDT

On Thu, 28 Aug 2003, Brian Howard wrote:

> Is anyone else seeing different patterns of attack? I seem to see two different

Yep! I am glad I am not the only one. Yesterday we had a user plug into the network and we only logged scans to the local subnet and a few other hosts.

Johnathan

> Johnathan Norman wrote:

---

This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven.
http://thinkgeek.com/sf

---

Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs Received on Fri Aug 29 09:36:48 2003