In IPS Attack log some attacker use port 0 ?

[abel_pan]

Hi  All

I  discovery some attack log content attacker or target use port 0 .

What happened in this log .

[fkazi04 · Accepted solution]

Hi @abel_pan 

NSP has a function to suppress the similar attack (same attack from same IP to same IP) for avoiding

a huge amount alert logging while encountering outbreak, DoS, etc.

The first attack will be logged with right port number and the following attacks will suppressed and logged after 2 minutes with the minimum information.

So you can find the first attack and check the right port.