Greetings... snort постоянно в репортах присылает подобное:
The number of attack from same host to same destination using same method ========================================================================= attacks to from ========================================================================= 9 Source Port traffic 172.24.13.68 inet-server.domain.dot.com 3 Source Port traffic 172.24.13.40 inet-server.domain.dot.com ... где inet-server.domain.dot.com есть DNS, web, ftp, proxy, mail, news сервером и на нём snort и крутится. Что бы это значило? -- Regards... +---------------------------------------------- | Oles' Stovbenko aka $LY Lord of GloomDaemons +---------------------------------------------- | Registered Linux User # : 232886 | ICQ UIN : 27308195 | NIC-Handle : OS11-UANIC -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
