Security Incidents mailing list archives
RE: isakmp
From: baudendist () primary net
Date: Thu, 2 Aug 2001 13:46:32 -0500 (CDT)
Yea... We were watching this yesterday... It looks like the packets are coming from WIN2K IPSec enabled web servers... It goes back to the 19th... VPN??? WIN2K interaction with the worm? Incidental? Who knows???? We were gonna call it the SKI portion of the Red Code worm... We will release more info on this as we look into it further. Scott Gordon & Matt Baudendistel reply to: baudendist () primary net ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
Current thread:
- isakmp Suzi VP (Aug 02)
- <Possible follow-ups>
- RE: isakmp baudendist (Aug 02)
- Re: isakmp Valdis . Kletnieks (Aug 03)
- RE: isakmp Portnoy, Gary (Aug 02)