TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ----------------------------------------------------------------------------
We are seeing a large number of sql server scans (port 1433) but the sensors are not picking it up ? does the ids pick up scans ? extract from our firewall log this morning ... 2002/09/03 14:44:17.542513 211.36.249.149 -> 146.195.30.5 TCP D=1433 S=12555 Syn Seq=240047220 Len=0 Win=16384 2002/09/03 14:44:17.543930 211.36.249.149 -> 146.195.30.7 TCP D=1433 S=12557 Syn Seq=240135344 Len=0 Win=16384 2002/09/03 14:44:17.548244 211.36.249.149 -> 146.195.30.10 TCP D=1433 S=12560 Syn Seq=240291844 Len=0 Win=16384 2002/09/03 14:44:17.552256 211.36.249.149 -> 146.195.30.1 TCP D=1433 S=12551 Syn Seq=239879230 Len=0 Win=16384 2002/09/03 14:44:17.552863 211.36.249.149 -> 146.195.30.12 TCP D=1433 S=12562 Syn Seq=240366083 Len=0 Win=16384 2002/09/03 14:44:17.554616 211.36.249.149 -> 146.195.30.3 TCP D=1433 S=12553 Syn Seq=239969397 Len=0 Win=16384 2002/09/03 14:44:17.558333 211.36.249.149 -> 146.195.30.17 TCP D=1433 S=12567 Syn Seq=240611292 Len=0 Win=16384 2002/09/03 14:44:17.558948 211.36.249.149 -> 146.195.30.9 TCP D=1433 S=12559 Syn Seq=240257460 Len=0 Win=16384
