Spoof source query

["Johnson, April" <apjohnson () seattleschools org>]

Anyone seen a Trojan/Virus/Rootkit that sends out IP packets sourced
from 0.n.n.n, where n is variable, but the first octet is *always* 0?

The source of the traffic happens to be a Windows box...

April Johnson (CISSP, CCNP, MCSE)
Network Operations - Security
Seattle Public Schools
Apjohnson*nospam*@seattleschools*nospam*.org
206.252.0353

"Give a kid a fish, and he eats for a day.  Teach a kid to fish, and he
eats for a lifetime."


---------------------------------------------------------------------------
----------------------------------------------------------------------------