View Full Version : Trusted Network Popup
Weyrman
May 8th, 2011, 12:24 AM
I keep getting a Port Scanning Attack notification from a laptop within my trusted network
Marcos
May 8th, 2011, 02:23 AM
If it's the laptop's IP address from which the attack is coming you can add its IP address to the list of addresses excluded from active protection (IDS) in the zone setup. Before you do so, generate a Wireshark (http://www.wireshark.org/) log with the network communication captured, compress it and upload it somewhere. Then PM me a link to the log so that I can download and check it out to make sure the attack is reported correctly.
Weyrman
May 8th, 2011, 02:27 AM
from a laptop running win7 HP 32bit
Marcos
May 8th, 2011, 02:28 AM
-{ Quote: "from a laptop running win7 HP 32bit" }-
I'm sorry, I've realized that and edited my post in the mean time.
Weyrman
May 8th, 2011, 07:21 AM
I have run wireshark and saved just the listings from the relevant machine 192.138.0.13
You can download the wireshark file here (http://users.tpg.com.au/allanb62//wireshark2.pcap)
vBulletin® Copyright ©2000-2013, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2013, Wilders Security Forums