Snort mailing list archives
Re: is this a bad traffic?
From: Matt Kettler <mkettler () evi-inc com>
Date: Wed, 10 Apr 2002 13:29:24 -0400
Quite ordinary. Windows update uses speedera based DNS, among other things. Of course, if the speedera traffic is coming from a Dialup account (as there have been reports of) it's likely a hacker tool.
Read the list archives.. heck.. speedera should almost be in the FAQ with how often people ask about it.
At 11:54 AM 4/10/2002 -0500, Ronneil Camara wrote:
I'm seeing a lot of icmp ping speedera hitting our dns server. Is this legitimate or should I blackhole it?Thanks. Neil _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- is this a bad traffic? Ronneil Camara (Apr 10)
- Re: is this a bad traffic? Matt Kettler (Apr 10)