nanog mailing list archives

Re: sniffer/promisc detector


From: Valdis.Kletnieks () vt edu
Date: Wed, 21 Jan 2004 11:40:15 -0500

On Wed, 21 Jan 2004 15:58:14 +0100, Ruben van der Leij <ruben-nanog () nutz nl>  said:

Somebody who isn't smart enough to do 'nmap -p 0-65535 $target' isn't worth
diverting.

I'm sure everybody who got whacked by Lion or CodeRed or Blaster or.... are
glad to hear those attacks weren't worth diverting.

The point is that if somebody is doing 'nmap -p 0-65535' at you, you are a *specific*
target, and not one of the "get a probe every 4 minutes" targets that every machine
on the wire is.

Attachment: _bin
Description:


Current thread: