finger and port scan test to bro
zhangtao at cc.gatech.edu
Mon Nov 19 17:36:56 PST 2001
I have installed Bro and done some experiments on it. I connected my
desktop adn laptop then setuped a tiny LAN network. Bro runs on the laptop
(RH7.1) and I use the desktop (windows2000) to attack Bro.
I tried to perform finger test to Bro (running with policy file
finger.bro) . I sent finger requests to the laptop under that desktop ,
but Bro gave out no notification on the screen even when I fingered some
hot names. Like finger root at 192.168.1.2
And, I tried to perform a port scan to bro too, it gave out no
notification either ( running with the policy file scan.bro) . I think it
should according to the documentation.
Could anybody give some possible reasons ?
-Tao Zhang (zhangtao at cc.gatech.edu)
More information about the Bro