SANCP 1.6.1-stable Security Analyst Network Connection Profiler
Snort plugin: Tag Stream v1.2 (updated 2003-12-29)
Snort plugin patch: Patches for spp_portscan2
[Generates two distinct alerts: "Distributed Host Scan" and "Distributed Port Scan" ]
Compliments to Jed Haile for "easy to read" code
E-Mail: servicesATmetre.net