Laura Chappell wrote an article for Security news Pro that unleashes the basics an IT professional needs to know to be tipped off by suspicious "hacker" activity. This article is in no way inclusive to all know attacks but instead more of a beginners guide.
Laura's guide demonstrates what actions might be taken for networks displaying the following symptoms:
* ARP scans are looking for active systems on a subnet * Ping scans are looking for active systems on the entire network
* Port scans are looking for active services over TCP or UDP
* Routing configurations are causing packet redirection or advertising new default gateway settings
* OS fingerprinting is attempting to identify operating system types and versions
* Services are not configured properly or services are not functioning properly
* Trace route is attempting to discover network paths
Comments (0)
Topsight.net
http://www.topsight.net/article.php/20031029104130626