Another New Worm or Worm Variant?

["David Gillett" <gillettdavid () fhda edu>]

  Lately, I seem to be seeing various Internet addresses trying
to do a UDP/137 (NetBIOS name service, match "*") of our whole
address block.
  Of course I've seen UDP/137 traffic before, and have been 
blocking it for ages, but I don't recall seeing methodical scans
using it.
  Anyone know what tool/worm this is?

Dave Gillett


---------------------------------------------------------------------------
----------------------------------------------------------------------------