Re: UDP Scan detection with xtables-addon psd

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thursday 2011-08-11 12:16, andreas wrote:

>Hi,
>
>But i can't get psd to detect nmap UDP scans.
>15:08 < norg> xv7: it's the commit adabd647b1d0421f961b5cc3808128001facb9bd

Oh yeah, that is strikingly obvious. Fixed in commit v1.37-5-g6c17eb4 
(psd branch).

>And another question is, is the psd development stopped and do you
>suggest to use lscan or do you have any other suggestion for me?

psd and lscan do two different things. One statistically monitors ports 
contacted over time, while lscan looks at one connection and inspects 
the TCP handshake (or lack thereof) to reach its conclusion.
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux