[Bro] Hass any one noticed a increase in scan from chine

William Jones jones at tacc.utexas.edu
Sun Feb 5 13:16:00 PST 2012


There scanners seem tobe  getting more aggressive scanning 1000's of host on a network in a few seconds.   This was causing my bro senders to drop packets.    I "fixed" the problem by pouting  filter in that ignored packet to a select few ports that I block at the barder router,  likt 1433, 445 ...

Bill Jones


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20120205/d7ef67e6/attachment.html 


More information about the Bro mailing list