[Bro] Hass any one noticed a increase in scan from chine
William Jones
jones at tacc.utexas.edu
Sun Feb 5 13:16:00 PST 2012
There scanners seem tobe getting more aggressive scanning 1000's of host on a network in a few seconds. This was causing my bro senders to drop packets. I "fixed" the problem by pouting filter in that ignored packet to a select few ports that I block at the barder router, likt 1433, 445 ...
Bill Jones
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20120205/d7ef67e6/attachment.html
More information about the Bro
mailing list