IDS: scan detect
Robert Zachary (comp-sec@our-town.com)
Tue, 23 Mar 1999 08:49:25 -0600
FAQ: See http://www.ticm.com/kb/faq/idsfaq.html
IDS: See http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
HELP: Having problems.. Then email questions to ids-owner@uow.edu.au
NOTE: You MUST remove this line from reply messages as it will be filtered.
SPAM: DO NOT send unsolicted mail to this list.
USUB: email "unsubscribe ids" to majordomo@uow.edu.au
---------------------------------------------------------------------------
If anyone needs the info, I have portscan detect set up to detect
incoming scans on ports 54(low scan), 31337(BO), and 12345(NetBus), if a
scan comes thru for any of these, the system catches them and emails to
alert. This is also displayed real-time on a v-console for active
viewing/testing. Not difficult to do, but it is handy.
/--------------------------------------------------------------/
Confidentiality, Integrity, Availibilty
Robert Zachary
Information Security Manager
Our-Town Internet
comp-sec@our-town.com
http://www.our-town.com
http://www.milleniumtechnology.net