Re: Interesting DNS update traffic

[Bill McCarty <bmccarty () pt-net net>]

Hi Sean,

--On Monday, March 29, 2004 4:56 PM -0500 Sean Brown <srbrown () appgeo com> 
wrote:

> So, anyone seen anything like this before?

Superficially, your report seems to be consistent with traffic related to 
the Trojan known as Calypso. See, for example, 
<http://cert.uni-stuttgart.de/archive/intrusions/2003/10/msg00154.html>.

---------------------------------------------------
Bill McCarty

---------------------------------------------------------------------------
Free 30-day trial: firewall with virus/spam protection, URL filtering, VPN,
wireless security

Protect your network against hackers, viruses, spam and other risks with Astaro
Security Linux, the comprehensive security solution that combines six
applications in one software solution for ease of use and lower total cost of
ownership.

Download your free trial at 
http://www.securityfocus.com/sponsor/Astaro_incidents_040301
----------------------------------------------------------------------------