Security Incidents mailing list archives

exact signature for mydoom / novarg

From: David M Dennis <dmd () speakeasy org>
Date: Thu, 29 Jan 2004 17:03:50 -0800 (PST)

Dear List,

Was wondering if there exists in public domain an IP signature
that includes packet size, port, tcp/udp, and anything else that
might narrow it further than "port 3127 / port 3198" .

Thanks,

+-------------------------
+ Dave Dennis
+ Seattle, WA
+ dmd () speakeasy org
+ http://www.dmdennis.com
+-------------------------


---------------------------------------------------------------------------
----------------------------------------------------------------------------

Current thread:

exact signature for mydoom / novarg David M Dennis (Jan 30)