Security Incidents mailing list archives

RE: isakmp

From: baudendist () primary net
Date: Thu, 2 Aug 2001 13:46:32 -0500 (CDT)

Yea... We were watching this yesterday... It looks like the packets are
coming from WIN2K IPSec enabled web servers... It goes back to the 19th...
VPN??? WIN2K interaction with the worm?  Incidental? Who knows???? 

We were gonna call it the SKI portion of the Red Code worm...

We will release more info on this as we look into it further.

Scott Gordon & Matt Baudendistel

reply to: baudendist () primary net


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Current thread:

isakmp Suzi VP (Aug 02)
- <Possible follow-ups>
- RE: isakmp baudendist (Aug 02)
  - Re: isakmp Valdis . Kletnieks (Aug 03)
- RE: isakmp Portnoy, Gary (Aug 02)