Portscan sensor receives detection from interface IP
Complete
A
Anonymous
In a setup with multiple VLAN's configured on a Honeypot, the Honeypot can receive detections from one or more interface IP addresses themselves (local traffic)
14-07-2023 -
Activity
Newest / Oldest
P
Peter Bin
We're deploying firmware update 2.0.1 in the following days which resolves this issue. Thank you for your patience and feedback!
This behaviour happens due to a bug in the sensor where it only listens for eth0 and not for VLAN's. Portscan sensor already has a feature to ignore traffic from its own IP, but ignores other interfaces.
Activity Newest / Oldest
Peter Bin
We're deploying firmware update 2.0.1 in the following days which resolves this issue. Thank you for your patience and feedback!
Peter Bin
We're releasing an update soon fixing this behavior.
Peter Bin
Peter Bin
Peter Bin
This behaviour happens due to a bug in the sensor where it only listens for eth0 and not for VLAN's. Portscan sensor already has a feature to ignore traffic from its own IP, but ignores other interfaces.