[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: fakebo vs nmap -sS (fwd)



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wed, Apr 05, 2000 at 10:38:36AM +0000, Sergio Brandano wrote:

>  Wichert Akkerman wrote:
> 
> > It does not log portscans
> 
>  It does log portscans. Give it a try, and you'll see it.
>  It is also true that fakebo does more than symply logging
>  the port scans, that is the reason why I like it.

I have just installed it (having used it a while ago at home, with some
amusement) and see no reference to it "logging port scans" in either its
config file or /usr/doc/fakebo/*.

It logs port connection attempts to two ports. This does not constitute
logging stealth-scan attempts from nmap - there are other toys available for
that purpose.

~Tim
- -- 
| Geek Code: GCS dpu s-:+ a-- C++++ UBLUAVHSC++++ P+++ L++ E--- W+++(--) N++ 
| w--- O- M-- V-- PS PGP++ t--- X+(-) b D+ G e++(*) h++(*) r--- y-	     
| The sun is melting over the hills,         | http://piglet.is.dreaming.org/
| All our roads are waiting / To be revealed | piglet@glutinous.custard.org

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.1 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iEYEARECAAYFAjjrHEYACgkQh3MeQyZWueRd2wCeNXOicSzuwSKjHDERu5VgRIX8
ftwAoIMoYB08TqVX6c0II0cEBpG43DIg
=wRl7
-----END PGP SIGNATURE-----


Reply to: