mailing list archives
Re: The witty worm
From: Gadi Evron <ge () egotistical reprehensible net>
Date: Sat, 20 Mar 2004 20:00:12 +0200
Gadi Evron wrote:
Information can be found at: http://www.f-secure.com/v-descs/witty.shtml
Also, the original place that talked about this worm (with a packet
capture and more information) is:
You can find a snort rule there.
Note that this worm is only 909 bytes, but as a friend of mine
mentioned, slammer was only 376.
Full-Disclosure - We believe in it.