Security Incidents mailing list archives
Re: [UPDATE]Dos Trojan on Solaris
From: rmueller () UU NET (Ross Mueller)
Date: Wed, 9 Feb 2000 11:10:59 -0500
are you sure it's milk that is the d-dos? i would bet it's a distributed syn flood.... my guess is stream.c..... from the rumors i hear going around... ..ross 0x75,0x75,0x6e,0x65,0x74 On Wed, 9 Feb 2000, Roderick Padilla wrote:
Thanks to all for all your responses and information. Today, is in the news (again). It was Yahoo and then EBay and Cnn.com and others. Same thing. Looks like there is no stop to this. We are very small if we compare the since of those sites, but small sites are the ones causing the problems. I would like to keep the subject going but not sure if there are answers. SUN is quiet so far on this (as usual). Please let me know if you find the source code of this "milk" or whatever name appears to be in your system. Thanks! Roderick Padilla Office:(404) 651-3832 Systems & Network Administrator Fax: (404) 651-3842 http://www.cis.gsu.edu/~rpadilla Email: rpadilla () gsu edu Department of Computer Information Systems J. Mack Robinson College of Business Georgia State University PO Box 4015 Atlanta, Georgia, USA 30302-4015
Current thread:
- AdForce hitting odd ports, (continued)
- AdForce hitting odd ports Rick Tortorella (Feb 11)
- UDP to 161 CL: Nelson, Jeff (Feb 10)
- Re: UDP to 161 Pavel Kankovsky (Feb 15)
- Re: UDP to 161 Ryan Russell (Feb 15)
- Re: UDP to 161 CyberPsychotic (Feb 16)
- Re: UDP to 161 Russell Fulton (Feb 15)
- Re: Private networks and home.{net|com} Andy Smith (Feb 09)
- massive unapproved AXFR's and odd rcvd NOTIFY's Paul Wouters (Feb 09)
- Re: massive unapproved AXFR's and odd rcvd NOTIFY's Francis A. Vidal (Feb 09)
- [UPDATE]Dos Trojan on Solaris Roderick Padilla (Feb 09)
- Re: [UPDATE]Dos Trojan on Solaris Ross Mueller (Feb 09)
- a very strange scan Boris Badenov (Feb 09)
- Re: a very strange scan Russell Fulton (Feb 10)
- Possible stacheldraht variant/probe Stephen P. Berry (Feb 09)
- Re: Possible stacheldraht variant/probe David Brumley (Feb 10)
- Re: [UPDATE]Dos Trojan on Solaris Robert Lau (Feb 09)
- Re: Strange traceroute Rob Quinn (Feb 08)
- vi as a suid Paulo Ribeiro (Feb 08)
- Re: Strange traceroute Hauke Johannknecht (Feb 08)