[logs] os fingerprinting and smurf attack signatures in logs

skproject23@private

hi,

can anyone please suggest what to look out for in the /var/log/messages of RH9 for a trace of OS fingerprinting done with nmap -O option. 
the iptables -t filter -I INPUT -j LOG has been enabled to log each packet. 

similarly, can anyone please suggest the attack signature for a smurf attack in the system logs of RH9?

thank you in advance,

Sujit.

_______________________________________________
LogAnalysis mailing list
LogAnalysis@private
http://lists.shmoo.com/mailman/listinfo/loganalysis