OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Thomdihotmail.com
Date: Wed Feb 07 2001 - 16:50:33 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
    majordomoiss.net Contact issforum-owneriss.net for help with any problems!
    ----------------------------------------------------------------------------

    hi all

    We've just installed a RS Console 5.5 a one RS Network Sensor 5.0.1 and we seem to have a problem

    Sensor and console look good but when we make some testing like portscan, ping scan, smurf ... the console display only one event even we do this testing huge. We think the console only display the event when src, dst address are different from previous event.

    does RS console 5.5 loose traffic or have a new undocumented feature filtering display ???

    All software are on NT4 SP6.0a US
    Sensor is in stealth mode with one of its NIC connected to a lan where there is a console.

    Monitored Network
            |
            |---RS NetWork-----
            | | RS Console
            | | |
                         ====================

    anyone got this already ?
    any solution ???

    Thks in advance !