Security Incidents mailing list archives
Re: ddos-stacheldraht server-spoof alerts ( Was: What is this?)
From: *Hobbit* <hobbit () AVIAN ORG>
Date: Fri, 16 Feb 2001 16:57:01 -0500
Windows napster clients attempt to ping everyone in the results list from a song search, to attempt to get speed metrics on who might be the best to download from. So yes, that's usually 100 separate and distinct pings everytime one of the lusers searches for a tune. I think the client can be configured to not do this, but you'd have to get everyone *outside* to do it too. Best is to just dump and not log anyone trying to ping your external NAT blocks and be done with it. _H*
Current thread:
- Re: ddos-stacheldraht server-spoof alerts ( Was: What is this?) *Hobbit* (Feb 16)
- Re: ddos-stacheldraht server-spoof alerts ( Was: What is this?) Stephen P. Berry (Feb 16)
- Re: ddos-stacheldraht server-spoof alerts ( Was: What is this?) Stephen P. Berry (Feb 24)
- <Possible follow-ups>
- Re: ddos-stacheldraht server-spoof alerts ( Was: What is this?) Erwin Geirnaert (Feb 19)
- Re: ddos-stacheldraht server-spoof alerts ( Was: What is this?) Stephen P. Berry (Feb 16)