rendered paste body GEN:SID 122:19
[snort] (portscan) UDP Portsweep unclassified 31960(23%) 2 4440 517 2007-06-13 21:29:09 2007-06-14 20:36:08
122:3
[snort] (portscan) TCP Portsweep unclassified 27404(20%) 2 3956 4473 2007-06-13 21:29:03 2007-06-14 20:36:11
122:7
[snort] (portscan) TCP Filtered Portsweep unclassified 18111(13%) 2 2721 1500 2007-06-13 21:29:00 2007-06-14 20:35:46
122:23
[snort] (portscan) UDP Filtered Portsweep unclassified 16892(12%) 2 895 945 2007-06-13 21:29:03 2007-06-14 20:35:36
122:4
[snort] (portscan) TCP Distributed Portscan unclassified 10874(8%) 2 4406 175 2007-06-13 21:29:06 2007-06-14 20:35:20
threshold.conf rules**
threshold gen_id 122, sig_id 19, type limit, track by_src, count 1, seconds 60
threshold gen_id 122, sig_id 3, type limit, track by_src, count 1, seconds 60
threshold gen_id 122, sig_id 4, type limit, track by_src, count 1, seconds 60
threshold gen_id 122, sig_id 7, type limit, track by_src, count 1, seconds 60
threshold gen_id 122, sig_id 23, type limit, track by_src, count 1, seconds 60