Ask Your Question

Revision history [back]

Can I detect who is doing a port scan on one of our internal servers

I have an internal server that it appears is having some form of port scanning being run against it. I suspect it is being run by someone or some service that is on our internal network. Can Wireshark identify the source of these port scans? And if so, how would I do that?