# Scan ports doubt
**URL:** https://community.zeek.org/t/scan-ports-doubt/3945
**Category:** Zeek
**Created:** [December 15, 2015, 10:10pm UTC](https://community.zeek.org/t/scan-ports-doubt/3945 "2015-12-15T22:10:22Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@Cristian\_Barbaro](https://community.zeek.org/u/Cristian_Barbaro)
#### Post date: [December 15, 2015, 10:10pm UTC](https://community.zeek.org/t/scan-ports-doubt/3945/1 "2015-12-15T22:10:22Z")
Hello, Community.
I've a problem with scan ports:
I'm working on a script to detect ports scan (horizontal and
vertical) using scan.bro script and I send email when detected. I've a
question with Notice::policy executions times.
I do a scan to IP's ports (e.g. 10.10.10.10) from a specific IP (e.g.
10.10.1.2). If scan detected first time, send email, but if I do another
scan to same IP (10.10.10.10) from 10.10.1.2, Notice::policy hook
doesn't execute again.
If I do nmap scan from another IP (e.g. 10.10.2.2) to 10.10.10.10,
occurs same problem: It only detects first time executing Notice::policy.
I would like to change this options but I can't find how to do it.
Thank you and I'm sorry for my English.
---
### Author:  [@Azoff\_Justin\_S](https://community.zeek.org/u/Azoff_Justin_S)
#### Post date: [December 15, 2015, 10:27pm UTC](https://community.zeek.org/t/scan-ports-doubt/3945/2 "2015-12-15T22:27:50Z")
Duplicate notices are suppressed so that you don't get notified about the same event over and over again.
Try something like this in your local.bro
redef Notice::type\_suppression\_intervals += {
[Scan::Port\_Scan] = 60sec,
[Scan::Address\_Scan] = 60sec,
};
---
### Author:  [@Cristian\_Barbaro](https://community.zeek.org/u/Cristian_Barbaro)
#### Post date: [December 15, 2015, 11:13pm UTC](https://community.zeek.org/t/scan-ports-doubt/3945/3 "2015-12-15T23:13:59Z")
Perfect. Works fine.
Thank you.
---
### Author:  [@system](https://community.zeek.org/u/system)
#### Post date: [May 6, 2022, 3:43pm UTC](https://community.zeek.org/t/scan-ports-doubt/3945/4 "2022-05-06T15:43:17Z")