hello,
psad is working but dont detect scan nmap, only show alert from ip
192.168.1.254
Top 25 attackers:
192.168.1.254 DL: 1, Packets: 6, Sig count: 0
[+] Top 20 scanned ports:
udp 41050 1 packets
udp 56370 1 packets
udp 48495 1 packets
udp 47398 1 packets
udp 35237 1 packets
udp 49542 1 packets
[+] iptables log prefix counters:
"[UFW BLOCK]": 6
Total protocol packet counters:
udp: 6 pkts
[+] IP Status Detail:
SRC: 192.168.1.254, DL: 1, Dsts: 1, Pkts: 6, Total protocols: 1, Unique
sigs: 0, Email alerts: 1, Local IP
DST: 192.168.1.66, Local IP
Scanned ports: UDP 35237-56370, Pkts: 6, Chain: INPUT, Intf: wlan0
Total scanned IP protocols: 1, Chain: INPUT, Intf: wlan0
Total scan sources: 1
Total scan destinations: 1
[+] These results are available in: /var/log/psad/status.out
thanks
hernani
------------------------------------------------------------------------------
Want fast and easy access to all the code in your enterprise? Index and
search up to 200,000 lines of code with a free copy of Black Duck
Code Sight - the same software that powers the world's largest code
search on Ohloh, the Black Duck Open Hub! Try it now.
http://p.sf.net/sfu/bds
_______________________________________________
psad-discuss mailing list
psad-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/psad-discuss
