Checking for open ports

Samhain
Prev | Appendix C. List of configuration file options | Next

# C.11. Checking for open ports

Section heading:

[PortCheck]

Entries:

PortCheckActive=`boolean` — 'true' to switch on, 'false' to switch off.

SeverityPortCheck=`severity` — Severity for events (default is crit).

PortCheckRequired=`interface:portlist` — Services (open ports) that are required.

PortCheckOptional=`interface:portlist` — Services (open ports) that are optional (allowed, but not required).

PortCheckIgnore=`interface:portlist` — Services (open ports) that should be ignored (no reports for this port).

PortCheckInterface=`IP adress` — Additional interface to scan (up to 15 interfaces).

PortCheckInterval=`seconds` — Interval between checks (default 300).

PortCheckUDP=`boolean` — Whether to scan UDP ports as well (default yes).

Prev | Home | Next
Checking for hidden/fake/required processes | Up | Database