IDS: slow udp scan

[Philipp Buehler <lists@fips.de>]

Archive: http://msgs.securepoint.com/ids
FAQ IDS: http://www.sans.org/newlook/resources/IDFAQ/ID_FAQ.htm
FAQ NIDS: http://www.ticm.com/kb/faq/idsfaq.html
IDS: http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
HELP: Having problems... email questions to ids-owner@uow.edu.au
NOTE: Remove this section from reply msgs otherwise the msg will bounce.
SPAM: DO NOT send unsolicted mail to this list.
UNSUBSCRIBE: email "unsubscribe ids" to majordomo@uow.edu.au
-----------------------------------------------------------------------------
Hi,

I have a slow [possible nmap -SU -T Sneaky] udp all-ports scanning
running from 62.32.32.233 to one IP on my LAN.
Changing source ports in the high 60000, I guess Linux masquerading.

This lasts now for about 2 days and I am pissed :>

Anyone else is getting those?
I know port-scanning is not really illegal, but not a lot of
probes more and I will report this one to the tech-c there. I hope
he cares.

ciao
-- 
Philipp Buehler, aka fips | sysfive.com GmbH | BOfH | NUCH | <double-p> 

#1: Break the clue barrier!
#2: Already had buzzword confuseritis ?