Hiding IP addresses in trace data

[John Kristoff <jtk () depaul edu>]

Too often it seems that people are attempting to hide their IP address
by masking the obvious dotted decimal notated number in various trace
data. If you really care about not disclosing your IP address, be sure
to also mask the hex data in the traces you send to public lists like
this one.

...and hiding only two octets is not enough as long as the IP checksum
remains in the trace data.

John

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com