OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Cristian Dumitrescu (omegaLUMINA.RO)
Date: Tue Jan 16 2001 - 04:36:09 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    You can use several programs, like snort ( the best in my opinion ) and
    portsentry, or jou can just use something like:
    /sbin/ipchains -A input -s 0/0 -d 0/0 111 -y -l
    and it will be logged by the kernel ussualy in /var/log/messages.

    Cristian Dumitrescu
    Admin

    On Tue, 16 Jan 2001, Digital Overdrive wrote:
    >
    > Just one question: How do you detect these scans ?
    > I can't find anything in my logs, but I don't have programs like
    > portsentry running. What can you (all) advice me ?
    >
    > Kind regards,
    >
    > Jan
    >
    >