Security Incidents mailing list archives

Re: Assistance and advice request


From: "Greg A. Woods" <woods () weird com>
Date: Fri, 28 Jul 2000 16:06:24 -0400

[ On Thursday, July 27, 2000 at 16:39:28 (-0400), Kirklin Spencer wrote: ]
Subject: Assistance and advice request

Situation one.  Very Large ICMP packet.

Likely someone checking to see if you've got a Path-MTU problem or not.

Situation two.  Slow Scan.

If this is a web server then the pings are probably coming from web
cache servers, such as Squid.

--
                                                        Greg A. Woods

+1 416 218-0098      VE3TCP      <gwoods () acm org>      <robohack!woods>
Planix, Inc. <woods () planix com>; Secrets of the Weird <woods () weird com>


Current thread: