Can anyone tell me how I would go about creating a signature to alert on a portscan that has sensed 50 or so IP address scans in 2 or 3 minutes and then send an e-mail that contains the ports, the victims and attackers IP address? I would appreciate the help.
