Increase in nmap pings

[Michael Schwartzkopff <misch () multinet de>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

since 9:00 CEST (7:00 GMT) I see a massive increase in nmap pings SID 469.

Characteristics:
- - Seems to stay in the class B net. So origin always in the class B net, where 
we are located. Only few exeptions.

- - Ping to the src address works.

- - scan of the src address shows a windows PC.

Some questions:
- - Is this related to the sasser worm?
- - Anybody else seeing it?

- -- 
Dr. Michael Schwartzkopff
MultiNET Services GmbH
Bretonischer Ring 7
85630 Grasbrunn

Tel: (+49 89) 456 911 - 0
Fax: (+49 89) 456 911 - 21
mob: (+49 174) 343 28 75

PGP-ID: 15F925D9CEF94F2C
Fingerprint: AF27 2674 4631 E230 B431  F68D 15F9 25D9 CEF9 4F2C

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2-rc1-SuSE (GNU/Linux)

iD8DBQFAlj93Ffkl2c75TywRAkuJAJ9LO3YC1f72/7pOpvWaJjF7BzokFACfSeFi
RMieeAG0wFsCGKHeayNLXiE=
=MdGS
-----END PGP SIGNATURE-----



-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g.
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id149&alloc_id66&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users