Security Incidents mailing list archives

Re: ddos-stacheldraht server-spoof alerts ( Was: What is this?)


From: *Hobbit* <hobbit () AVIAN ORG>
Date: Fri, 16 Feb 2001 16:57:01 -0500

Windows napster clients attempt to ping everyone in the results list from
a song search, to attempt to get speed metrics on who might be the best to
download from.  So yes, that's usually 100 separate and distinct pings
everytime one of the lusers searches for a tune.

I think the client can be configured to not do this, but you'd have to get
everyone *outside* to do it too.  Best is to just dump and not log anyone
trying to ping your external NAT blocks and be done with it.

_H*


Current thread: