About aagmon

aagmon · ‎04-12-2010

thanks.. that really is great. just that in the log file i also have multiple hosts e.g. it logs different hosts and ports: do i need to use "dedup port,host" to solve it?

aagmon · ‎04-10-2010

Hi All... i'll first describe my scenario.. i have logs that contains entries regarding open ports like: 1-1-2000 192.168.0.1 port=80 service=http 1-1-2000 192.168.0.1 port=22 service=ssh 1-3-2000 192.168.0.1 port=80 service=http 1-3-2000 192.168.0.1 port=3350 service=unknown 1-3-2000 192.168.0.1 port=80 service=http now' you can see that on the 1-3 an open port (3350) was detected, while that same port was not detected before. how can i search for events like this? how can i compare results from scanA at a specific date to another one?

Posts	2
Solutions	0
Karma Given	0
Karma Received	0
Member Since	‎04-10-2010

Online Status	Offline
Date Last Visited	‎06-05-2020 02:02 AM

Comparing events from 2 dates to detect new ones

Re: Comparing events from 2 dates to detect new on...

Comparing events from 2 dates to detect new ones