Piru wrote:
@mr_a500
This will let you know if anyone attempts to use your HDs/storage mediums.
If someone is really probing things he'll use stealth scans (SYN, TCP null, FIN, Xmas). These will not show up.
He could always run snort on another machine, then he would see the scans...