Re: Odd UPD scan

[peak () ARGO TROJA MFF CUNI CZ (Pavel Kankovsky)]

On Mon, 20 Mar 2000, Bill Pennington wrote:

> ...I mean IPX/SPX and Appletalk are generally very noisy but TCP/UDP
> should be a bit more elegant IMHO.

This is not TCP/UDP but *NetBIOS* over TCP/UDP.

> It would be intersting to find out how much bandwidth is getting chewed
> up at sites like yahoo.com and amazon.com. I bet it is quite a lot.
> Maybe ISP's should block this traffic outbound by default.

> I think that would go a long way it combating this bandwitdh
> hog/security risk.

I have to ask myself what would happen if I sent a bogus reply instead of
dropping the request on the floor. Could I make the client go down in
flames (or something worse)? (Q for VULN-DEV?) If yes, there would be a
strong incentive to get rid of this braindead feature. ;)

--Pavel Kankovsky aka Peak  [ Boycott Microsoft--http://www.vcnet.com/bms ]
"Resistance is futile. Open your source code and prepare for assimilation."