[luau] Help deciphering portscan entries in /var/log/messages
Dean Fujioka
surfdean at hawaii.rr.com
Fri Dec 13 14:48:00 PST 2002
Ben Beeson wrote:
>Aloha,
>
> I have several entries in my router's /var/log/messages that look like this
>one.
>
>Dec 11 20:12:50 router snort: [117:1:1] (spp_portscan2) Portscan detected
>from 66.8.222.33: 6 targets 9 ports in 20 seconds {TCP} 66.8.222.33:49582 ->
>12.246.156.221:6346
>
>
FWIW, I believe that 6346 is the default port for limewire/gnutella...
dean
More information about the LUAU
mailing list