Bob Therina wrote:
Does anyone know how I might use one of the live linux CD's that Scott
wrote about in Security Focus a couple months ago to check to see if a
windows XP box is scanning ports on a network?
Although this machine has a bunch of garbage on it, I can't find
anything specific.
I have Helix, Auditor and Knoppix-STD but, not sure what to look for.
Any suggestions would be much appreciated.
Thanks, Bob
_______________________________________________
CWE-LUG mailing list
[email protected]
http://www.cwelug.org/
http://www.cwelug.org/archives/
http://www.cwelug.org/mailinglist/
My suggestion would be use 'snort' from the Auditor cd on a different
box, and watch for the IP address (if known) of the suspect computer.
M. Georg
_______________________________________________
CWE-LUG mailing list
[email protected]
http://www.cwelug.org/
http://www.cwelug.org/archives/
http://www.cwelug.org/mailinglist/
