portsentry problem

supervos · 10-20-2005, 07:05 AM

Hi,

Ive installed portsentry on my fedora core 2 machine but its not working the way it should. Here's my log. Has anyone got a clou of whats going wrong ??

Thnx

Oct 20 13:15:35 ws1 portsentry[11004]: adminalert: ERROR: could not go into PortSentry mode. Shutting down.
Oct 20 13:15:35 ws1 portsentry[11004]: securityalert: Psionic PortSentry is shutting down
Oct 20 13:15:35 ws1 portsentry[11004]: adminalert: Psionic PortSentry is shutting down
Oct 20 13:23:00 ws1 CROND[11031]: (root) CMD (/sbin/service portsentry restart >/dev/null && /sbin/service iptables restart >/dev/null)
Oct 20 13:23:00 ws1 portsentry[11000]: securityalert: Psionic PortSentry is shutting down
Oct 20 13:23:00 ws1 portsentry[11000]: adminalert: Psionic PortSentry is shutting down
Oct 20 13:23:00 ws1 portsentry[10998]: securityalert: Psionic PortSentry is shutting down
Oct 20 13:23:00 ws1 portsentry[10998]: adminalert: Psionic PortSentry is shutting down
Oct 20 13:23:00 ws1 portsentry[10838]: securityalert: Psionic PortSentry is shutting down
Oct 20 13:23:00 ws1 portsentry[10838]: adminalert: Psionic PortSentry is shutting down
Oct 20 13:23:00 ws1 portsentry[10834]: securityalert: Psionic PortSentry is shutting down
Oct 20 13:23:00 ws1 portsentry[10834]: adminalert: Psionic PortSentry is shutting down
Oct 20 13:23:00 ws1 portsentry: portsentry shutdown succeeded
Oct 20 13:23:00 ws1 portsentry[11066]: adminalert: Psionic PortSentry 1.1 is starting.
Oct 20 13:23:00 ws1 portsentry[11067]: adminalert: Advanced mode will monitor first 1024 ports
Oct 20 13:23:00 ws1 portsentry[11067]: adminalert: Advanced mode will manually exclude port: 21
Oct 20 13:23:00 ws1 portsentry[11067]: adminalert: Advanced mode will manually exclude port: 22
Oct 20 13:23:00 ws1 portsentry[11067]: adminalert: Advanced mode will manually exclude port: 25
Oct 20 13:23:00 ws1 portsentry[11067]: adminalert: Advanced mode will manually exclude port: 53
Oct 20 13:23:00 ws1 portsentry[11067]: adminalert: Advanced mode will manually exclude port: 80
Oct 20 13:23:00 ws1 portsentry[11067]: adminalert: Advanced mode will manually exclude port: 110
Oct 20 13:23:00 ws1 portsentry[11067]: adminalert: Advanced mode will manually exclude port: 113
Oct 20 13:23:00 ws1 portsentry[11067]: adminalert: Advanced mode will manually exclude port: 135
Oct 20 13:23:00 ws1 portsentry[11067]: adminalert: Advanced mode will manually exclude port: 137
Oct 20 13:23:00 ws1 portsentry[11067]: adminalert: Advanced mode will manually exclude port: 138
Oct 20 13:23:00 ws1 portsentry[11067]: adminalert: Advanced mode will manually exclude port: 139
Oct 20 13:23:00 ws1 portsentry: (atcp) succeeded
Oct 20 13:23:00 ws1 portsentry[11070]: adminalert: Psionic PortSentry 1.1 is starting.
Oct 20 13:23:00 ws1 portsentry[11071]: adminalert: Advanced mode will monitor first 1024 ports
Oct 20 13:23:00 ws1 portsentry[11067]: adminalert: Advanced mode will manually exclude port: 443
Oct 20 13:23:00 ws1 portsentry: (audp) succeeded
Oct 20 13:23:00 ws1 portsentry[11067]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 22
Oct 20 13:23:00 ws1 portsentry[11067]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 25
Oct 20 13:23:00 ws1 portsentry[11067]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 80
Oct 20 13:23:00 ws1 portsentry[11067]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 111
Oct 20 13:23:00 ws1 portsentry[11067]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 443
Oct 20 13:23:00 ws1 portsentry[11067]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 631
Oct 20 13:23:00 ws1 portsentry[11067]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 21
Oct 20 13:23:00 ws1 portsentry[11067]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 22
Oct 20 13:23:00 ws1 portsentry[11067]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 25
Oct 20 13:23:00 ws1 portsentry[11067]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 53
Oct 20 13:23:00 ws1 portsentry[11067]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 80
Oct 20 13:23:00 ws1 portsentry[11071]: adminalert: Advanced mode will manually exclude port: 520
Oct 20 13:23:00 ws1 portsentry[11067]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 110
Oct 20 13:23:00 ws1 portsentry[11071]: adminalert: Advanced mode will manually exclude port: 517
Oct 20 13:23:00 ws1 portsentry[11067]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 113
Oct 20 13:23:00 ws1 portsentry[11071]: adminalert: Advanced mode will manually exclude port: 518
Oct 20 13:23:00 ws1 portsentry[11067]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 135
Oct 20 13:23:00 ws1 portsentry[11071]: adminalert: Advanced mode will manually exclude port: 513
Oct 20 13:23:00 ws1 portsentry[11067]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 137
Oct 20 13:23:00 ws1 iptables: succeeded
Oct 20 13:23:00 ws1 portsentry[11071]: adminalert: Advanced mode will manually exclude port: 138
Oct 20 13:23:00 ws1 portsentry[11067]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 138
Oct 20 13:23:00 ws1 portsentry[11071]: adminalert: Advanced mode will manually exclude port: 137
Oct 20 13:23:00 ws1 portsentry[11067]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 139
Oct 20 13:23:00 ws1 portsentry[11071]: adminalert: Advanced mode will manually exclude port: 123
Oct 20 13:23:00 ws1 portsentry[11067]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 443
Oct 20 13:23:00 ws1 portsentry[11071]: adminalert: Advanced mode will manually exclude port: 68
Oct 20 13:23:00 ws1 iptables: succeeded
Oct 20 13:23:00 ws1 portsentry[11067]: adminalert: PortSentry is now active and listening.
Oct 20 13:23:01 ws1 portsentry[11071]: adminalert: Advanced mode will manually exclude port: 67
Oct 20 13:23:01 ws1 portsentry[11071]: adminalert: Advanced mode will manually exclude port: 53
Oct 20 13:23:01 ws1 portsentry[11071]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 111
Oct 20 13:23:01 ws1 portsentry[11071]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 631
Oct 20 13:23:01 ws1 portsentry[11071]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 698
Oct 20 13:23:01 ws1 portsentry[11071]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 520
Oct 20 13:23:01 ws1 portsentry[11071]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 517
Oct 20 13:23:01 ws1 portsentry[11071]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 518
Oct 20 13:23:01 ws1 portsentry[11071]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 513
Oct 20 13:23:01 ws1 portsentry[11071]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 138
Oct 20 13:23:01 ws1 portsentry[11071]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 137
Oct 20 13:23:01 ws1 portsentry[11071]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 123
Oct 20 13:23:01 ws1 portsentry[11071]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 68
Oct 20 13:23:01 ws1 portsentry[11071]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 67
Oct 20 13:23:01 ws1 portsentry[11071]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 53
Oct 20 13:23:01 ws1 portsentry[11071]: adminalert: PortSentry is now active and listening.
Oct 20 13:23:01 ws1 iptables: succeeded
Oct 20 13:23:01 ws1 kernel: ip_tables: (C) 2000-2002 Netfilter core team
Oct 20 13:23:01 ws1 kernel: ip_conntrack version 2.1 (1024 buckets, 8192 max) - 296 bytes per conntrack
Oct 20 13:23:01 ws1 iptables: succeeded
Oct 20 13:43:00 ws1 CROND[11145]: (root) CMD (/sbin/service portsentry restart >/dev/null && /sbin/service iptables restart >/dev/null)
Oct 20 13:43:00 ws1 portsentry[11071]: securityalert: Psionic PortSentry is shutting down
Oct 20 13:43:00 ws1 portsentry[11071]: adminalert: Psionic PortSentry is shutting down
Oct 20 13:43:00 ws1 portsentry[11067]: securityalert: Psionic PortSentry is shutting down
Oct 20 13:43:00 ws1 portsentry[11067]: adminalert: Psionic PortSentry is shutting down
Oct 20 13:43:00 ws1 portsentry: portsentry shutdown succeeded
Oct 20 13:43:00 ws1 portsentry[11180]: adminalert: Psionic PortSentry 1.1 is starting.
Oct 20 13:43:00 ws1 portsentry[11181]: adminalert: Advanced mode will monitor first 1024 ports
Oct 20 13:43:00 ws1 portsentry[11181]: adminalert: Advanced mode will manually exclude port: 21
Oct 20 13:43:00 ws1 portsentry[11181]: adminalert: Advanced mode will manually exclude port: 22
Oct 20 13:43:00 ws1 portsentry[11181]: adminalert: Advanced mode will manually exclude port: 25
Oct 20 13:43:00 ws1 portsentry[11181]: adminalert: Advanced mode will manually exclude port: 53
Oct 20 13:43:00 ws1 portsentry[11181]: adminalert: Advanced mode will manually exclude port: 80
Oct 20 13:43:00 ws1 portsentry[11181]: adminalert: Advanced mode will manually exclude port: 110
Oct 20 13:43:00 ws1 portsentry[11181]: adminalert: Advanced mode will manually exclude port: 113
Oct 20 13:43:00 ws1 portsentry[11181]: adminalert: Advanced mode will manually exclude port: 135
Oct 20 13:43:00 ws1 portsentry[11181]: adminalert: Advanced mode will manually exclude port: 137
Oct 20 13:43:00 ws1 portsentry[11181]: adminalert: Advanced mode will manually exclude port: 138
Oct 20 13:43:00 ws1 portsentry[11181]: adminalert: Advanced mode will manually exclude port: 139
Oct 20 13:43:00 ws1 portsentry[11181]: adminalert: Advanced mode will manually exclude port: 443
Oct 20 13:43:00 ws1 portsentry: (atcp) succeeded
Oct 20 13:43:00 ws1 portsentry[11184]: adminalert: Psionic PortSentry 1.1 is starting.
Oct 20 13:43:00 ws1 portsentry: (audp) succeeded
Oct 20 13:43:00 ws1 portsentry[11181]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 22
Oct 20 13:43:00 ws1 portsentry[11181]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 25
Oct 20 13:43:00 ws1 portsentry[11181]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 80
Oct 20 13:43:00 ws1 portsentry[11181]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 111
Oct 20 13:43:00 ws1 portsentry[11181]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 443
Oct 20 13:43:00 ws1 portsentry[11181]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 631
Oct 20 13:43:00 ws1 portsentry[11181]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 21
Oct 20 13:43:00 ws1 portsentry[11185]: adminalert: Advanced mode will monitor first 1024 ports
Oct 20 13:43:01 ws1 portsentry[11181]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 22
Oct 20 13:43:01 ws1 portsentry[11181]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 25
Oct 20 13:43:01 ws1 portsentry[11181]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 53
Oct 20 13:43:01 ws1 portsentry[11181]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 80
Oct 20 13:43:01 ws1 portsentry[11181]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 110
Oct 20 13:43:01 ws1 portsentry[11181]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 113
Oct 20 13:43:01 ws1 portsentry[11181]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 135
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced mode will manually exclude port: 520
Oct 20 13:43:01 ws1 iptables: succeeded
Oct 20 13:43:01 ws1 portsentry[11181]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 137
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced mode will manually exclude port: 517
Oct 20 13:43:01 ws1 iptables: succeeded
Oct 20 13:43:01 ws1 portsentry[11181]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 138
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced mode will manually exclude port: 518
Oct 20 13:43:01 ws1 portsentry[11181]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 139
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced mode will manually exclude port: 513
Oct 20 13:43:01 ws1 portsentry[11181]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 443
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced mode will manually exclude port: 138
Oct 20 13:43:01 ws1 portsentry[11181]: adminalert: PortSentry is now active and listening.
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced mode will manually exclude port: 137
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced mode will manually exclude port: 123
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced mode will manually exclude port: 68
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced mode will manually exclude port: 67
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced mode will manually exclude port: 53
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 111
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 631
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 698
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 520
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 517
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 518
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 513
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 138
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 137
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 123
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 68
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 67
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 53
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: PortSentry is now active and listening.
Oct 20 13:43:01 ws1 iptables: succeeded
Oct 20 13:43:01 ws1 kernel: ip_tables: (C) 2000-2002 Netfilter core team
Oct 20 13:43:01 ws1 kernel: ip_conntrack version 2.1 (1024 buckets, 8192 max) - 296 bytes per conntrack
Oct 20 13:43:01 ws1 iptables: succeeded
[root@ws1 makedev.d]# vi /var/log/messages
Oct 20 13:43:00 ws1 portsentry[11181]: adminalert: Advanced mode will manually exclude port: 137
Oct 20 13:43:00 ws1 portsentry[11181]: adminalert: Advanced mode will manually exclude port: 138
Oct 20 13:43:00 ws1 portsentry[11181]: adminalert: Advanced mode will manually exclude port: 139
Oct 20 13:43:00 ws1 portsentry[11181]: adminalert: Advanced mode will manually exclude port: 443
Oct 20 13:43:00 ws1 portsentry: (atcp) succeeded
Oct 20 13:43:00 ws1 portsentry[11184]: adminalert: Psionic PortSentry 1.1 is starting.
Oct 20 13:43:00 ws1 portsentry: (audp) succeeded
Oct 20 13:43:00 ws1 portsentry[11181]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 22
Oct 20 13:43:00 ws1 portsentry[11181]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 25
Oct 20 13:43:00 ws1 portsentry[11181]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 80
Oct 20 13:43:00 ws1 portsentry[11181]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 111
Oct 20 13:43:00 ws1 portsentry[11181]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 443
Oct 20 13:43:00 ws1 portsentry[11181]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 631
Oct 20 13:43:00 ws1 portsentry[11181]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 21
Oct 20 13:43:00 ws1 portsentry[11185]: adminalert: Advanced mode will monitor first 1024 ports
Oct 20 13:43:01 ws1 portsentry[11181]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 22
Oct 20 13:43:01 ws1 portsentry[11181]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 25
Oct 20 13:43:01 ws1 portsentry[11181]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 53
Oct 20 13:43:01 ws1 portsentry[11181]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 80
Oct 20 13:43:01 ws1 portsentry[11181]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 110
Oct 20 13:43:01 ws1 portsentry[11181]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 113
Oct 20 13:43:01 ws1 portsentry[11181]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 135
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced mode will manually exclude port: 520
Oct 20 13:43:01 ws1 iptables: succeeded
Oct 20 13:43:01 ws1 portsentry[11181]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 137
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced mode will manually exclude port: 517
Oct 20 13:43:01 ws1 iptables: succeeded
Oct 20 13:43:01 ws1 portsentry[11181]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 138
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced mode will manually exclude port: 518
Oct 20 13:43:01 ws1 portsentry[11181]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 139
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced mode will manually exclude port: 513
Oct 20 13:43:01 ws1 portsentry[11181]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 443
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced mode will manually exclude port: 138
Oct 20 13:43:01 ws1 portsentry[11181]: adminalert: PortSentry is now active and listening.
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced mode will manually exclude port: 137
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced mode will manually exclude port: 123
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced mode will manually exclude port: 68
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced mode will manually exclude port: 67
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced mode will manually exclude port: 53
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 111
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 631
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 698
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 520
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 517
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 518
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 513
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 138
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 137
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 123
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 68
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 67
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 53
Oct 20 13:43:01 ws1 portsentry[11185]: adminalert: PortSentry is now active and listening.
Oct 20 13:43:01 ws1 iptables: succeeded
Oct 20 13:43:01 ws1 kernel: ip_tables: (C) 2000-2002 Netfilter core team
Oct 20 13:43:01 ws1 kernel: ip_conntrack version 2.1 (1024 buckets, 8192 max) - 296 bytes per conntrack
Oct 20 13:43:01 ws1 iptables: succeeded
test

unSpawn · 10-21-2005, 07:19 PM

Ive installed portsentry on my fedora core 2 machine
...and there it all went wrong from the start. Uninstall it and install a proper IDS that's maintained, enhanced and supported by a huge community: Snort. Portsentry was a good tool when nothing else was around, but it had it's flaws and Psionic didn't really maintain it much this millennium. Then it was bought by Cisco, then released on Sourceforge and now the last source date is 2003. Ditch it, don't waste time.