Full Disclosure mailing list archives

Re: Worm side effects


From: "Geoincidents" <geoincidents () getinfo org>
Date: Mon, 25 Aug 2003 18:32:02 -0400

From: "Florian Weimer" <fw () deneb enyo de>

AFAIK, the worm uses a standard Windows routine to generate those ICMP
packets.

Nope, normal NT ping generates a 60 byte packet not 92 byte.

Geo.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: