1

Portscan sensor receives detection from interface IP

  • Complete

A
Anonymous

In a setup with multiple VLAN's configured on a Honeypot, the Honeypot can receive detections from one or more interface IP addresses themselves (local traffic)

A

Activity Newest / Oldest

P

Peter Bin

We're deploying firmware update 2.0.1 in the following days which resolves this issue. Thank you for your patience and feedback!


P

Peter Bin

We're releasing an update soon fixing this behavior.


P

Peter Bin


P

Peter Bin


P

Peter Bin

This behaviour happens due to a bug in the sensor where it only listens for eth0 and not for VLAN's. Portscan sensor already has a feature to ignore traffic from its own IP, but ignores other interfaces.