RE: strange traffic

From: Rob Shein <shoten(at)starpower.net>
Date: Tue Dec 24 2002 - 15:07:16 EST

Well, you're also assuming that the packets came from the IP addresses that they SAY they came from. It's possible that this was covert channel communications from one machine. Did you by any chance grab the actual contents of the pings?

Also, why do you assume that other computers on your ISP's network may have been affected, and it if wasn't directed at your gateway, what kind of system WAS it directed at?

> -----Original Message-----
> From: securitynotice@cronus.cnicinc.com
> [mailto:securitynotice@cronus.cnicinc.com]
> Sent: Sunday, December 22, 2002 11:31 PM
> To: incidents@securityfocus.com
> Subject: strange traffic
>
>
> Tonight at 6:04pm est, a bunch of ping packets hit my gateway from a

---

This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com Received on Fri Dec 27 12:06:42 2002