Hot Downloads

Welcome, Guest
Username: Password: Remember me

TOPIC: network scan in realsecure IDS

network scan in realsecure IDS 12 years 7 months ago #10336

  • allan
  • allan's Avatar
  • Offline
  • New Member
  • Posts: 5
  • Karma: 0
when monitoring the network sensor, i've noticed there are network scan on tcp445. Some detail are as following:

Sensor event From to info

NIDS01 network scan X.X.X.X X.X.X.X count-750

That means the network sensor has detected 750 times of same event (network scan). Bur how can I verify the frequency? I mean, it is 750 times/per minutes or 750 times/per hour?
anybody can help?
The administrator has disabled public write access.

Re: network scan in realsecure IDS 12 years 7 months ago #10366

  • jwj
  • jwj's Avatar
  • Offline
  • Senior Member
  • Posts: 350
  • Karma: 0
I'm very confident that this is a cumulative count. As far as finding time information, you'll have to look at the individual events to get a feel of the timing of these events. My look at ISS' RealSecure IDS 7.0 documentation did not indicate any way to filter your events by time received, it seems to just filter based on packet contents.

Here's a link to ISS' documentation on this IDS.
The administrator has disabled public write access.
Time to create page: 0.116 seconds


Cisco Routers

  • SSL WebVPN
  • Securing Routers
  • Policy Based Routing
  • Router on-a-Stick

VPN Security

  • Understand DMVPN
  • GRE/IPSec Configuration
  • Site-to-Site IPSec VPN
  • IPSec Modes

Cisco Help

  • VPN Client Windows 8
  • VPN Client Windows 7
  • CCP Display Problem
  • Cisco Support App.

Windows 2012

  • New Features
  • Licensing
  • Hyper-V / VDI
  • Install Hyper-V


  • File Permissions
  • Webmin
  • Groups - Users
  • Samba Setup