[cobalt-users] Testing portscan detection

["Robert Roose" <robertr@xxxxxxxxxxxxx>]

Hiya

I'm still testing my RaQ550 and when i use a portscan from my machine
(192.168.2.50) to the RaQ (192.168.2.12) I get the following log file:

This alert notification is to inform you of network activity occurring
on your host.

           Timestamp:  Tue 30 Jul 2002 04:01:12 PM CEST
          Alert Type:  Port Scan Detected
           Interface:  eth1
            Protocol:  tcp
 Packet Size (bytes):  40

      Source Address:  192.168.2.12
         Source port:  7
           Direction:  outbound
 Destination Address:  192.168.2.50
    Destination Port:  4630

           Log Entry:  eth1:portscan: tcp 192.168.2.12/7 ->
192.168.2.50/4630 40 rst (16)
If I'm reading this correctly the server is doing the scanning instead
of me. Or am I reading this wrongly?

-- Robert