On Friday 12 July 2002 03.26, Diyan Christian wrote: > nope, but several of my hosts had an increasing scans for ssh port from the > internet recently, does anybody have snort signature on this? You should really consider subscribing to at least the snort-sigs and snort-cvsinfo lists if you're interested in these things. /Andreas