> From: Greg A. Woods [mailto:woods_at_MOST.WEIRD.COM]
> Sent: Tuesday, February 29, 2000 10:10 PM
> To: INCIDENTS_at_SECURITYFOCUS.COM
> Subject: Re: @home: Is *anyone* really home there???
<SNIP>
> I don't want to see any reports that simply mention an errant
> packet or
> two, regardless of what the packet destination port was.
<SNIP>
"An errant packet or two" is all most people see of a sunrpc scan. I've
never had my sunrpc port connected to by a machine that was *not* hacked.
Therefore I consider a single connection important and go out of my way to
notify the administrators of that machine.
If that's truly what you mean by 'an errant packet or two' I think you're
missing something important.
Jonathan Burdge
These opinions do not reflect those of my employer.
Received on Mar 03 2000