From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <linux-kernel-owner@vger.kernel.org>
Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand
	id <S262664AbREVRLy>; Tue, 22 May 2001 13:11:54 -0400
Received: (majordomo@vger.kernel.org) by vger.kernel.org
	id <S262666AbREVRLo>; Tue, 22 May 2001 13:11:44 -0400
Received: from mail.zmailer.org ([194.252.70.162]:32271 "EHLO zmailer.org")
	by vger.kernel.org with ESMTP id <S262664AbREVRLa>;
	Tue, 22 May 2001 13:11:30 -0400
Date: Tue, 22 May 2001 20:11:12 +0300
From: Matti Aarnio <matti.aarnio@zmailer.org>
To: Joe Barr <warthawg@blackhat.net>
Cc: David Relson <relson@osagesoftware.com>, linux-kernel@vger.kernel.org
Subject: Re: Final Warning [ was: ECN is on! ]
Message-ID: <20010522201112.P5947@mea-ext.zmailer.org>
In-Reply-To: <20010522131031.C5947@mea-ext.zmailer.org> <15114.18990.597124.656559@pizda.ninka.net> <4.3.2.7.2.20010522105643.00d1d380@mail.osagesoftware.com> <20010522115559.1f4b5aa8.warthawg@blackhat.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20010522115559.1f4b5aa8.warthawg@blackhat.net>; from warthawg@blackhat.net on Tue, May 22, 2001 at 11:55:59AM -0500
Sender: linux-kernel-owner@vger.kernel.org
X-Mailing-List: linux-kernel@vger.kernel.org

On Tue, May 22, 2001 at 11:55:59AM -0500, Joe Barr wrote:
> What is ECN?  Is it the reason SNORT has started this lately:

    http://vger.kernel.org/

  Follow the links, and you will get an exellent answer.

> <snip>
> Active System Attack Alerts
> =-=-=-=-=-=-=-=-=-=-=-=-=-=
> May 22 10:11:18 pooh snort: spp_portscan: PORTSCAN DETECTED from 199.183.24.194 (STEALTH)
> May 22 10:11:22 pooh snort: spp_portscan: portscan status from 199.183.24.194: 1 connections across 1 hosts: TCP(1), UDP(0) STEALTH
> </snip>
> 
> See ya,
> Joe Barr

/Matti Aarnio