Home page logo

nanog logo nanog mailing list archives

Re: Sobig.f surprise attack today
From: Andrew Kerr <andrew_kerr () iamnos ca>
Date: Fri, 22 Aug 2003 13:43:23 -0600

Jay Hennigan wrote:
On Fri, 22 Aug 2003, Andrew Kerr wrote:

Its been posted here, and f-secure has it, but I wrote a quick script to
keep an eye on the 20 servers and dump the output to a simple page:

(Updates about every 5 mins)

You're probing the list of NTP servers the worm uses to get the date, not
the list of hosts to which it "phones home".

A few people pointed that out. By the time this message hits the list, it should be corrected.

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]