link between MP3 sites and Cyberkit pings ?

[Jean Michel BARBET <Jean-Michel.Barbet () subatech in2p3 fr>]

Hi,

My sensor is also alerting on CyberKit Pings since August, 15th.
There are two cases :

a) one external IP pings several hosts on our LAN (kind of ICPM scan).

b) 2 specific hosts on our LAN are the target of more than 50% of the
   Cyberkit ping traffic.

I do not understand b). The only clue is that both host have been
used to connect to MP3 sites.

=> any similar experience ? explanation ?

Jean-Michel BARBET.

--
------------------------------------------------------------------------
Jean-michel BARBET                    | Tel: +33 (0)2 51 85 84 86
Laboratoire SUBATECH Nantes France    | Fax: +33 (0)2 51 85 84 79
CNRS-IN2P3/Ecole des Mines/Universite | E-Mail: barbet () subatech in2p3 fr
------------------------------------------------------------------------



-------------------------------------------------------
This SF.net email is sponsored by: VM Ware
With VMware you can run multiple operating systems on a single machine.
WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines
at the same time. Free trial click here:http://www.vmware.com/wl/offer/358/0
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users