nanog mailing list archives

Re: Traffic to our customer's address(126.0.0.0/8) seems blocked by packet filter


From: Petri Helenius <pete () he iki fi>
Date: Wed, 03 Aug 2005 22:23:35 +0300


Randy Bush wrote:

You can ping to 126.66.0.30/8.

and how does one ping a /8?

Most trojans for zombie networks provide this functionality. Connect to your favourite C&C server and issue;
.advscan ping 42 2 64 126.X.X.X
(this will ping the address space with 42 threads, using two second intervals for packets, the X's work as wildcards)

After the scan has completed, issue .scanstats to view your results.

If you need to stop the pinging in the interim, issue .scanstop to cease.

Pete



Current thread: