Re: Is anyone else seeing SMURF ?

["GSimmonds" <gsimmonds () primus ca>]

----- Original Message ----- 
From: <SVater () oh hra com>
To: <security-basics () securityfocus com>
Sent: Monday, August 25, 2003 12:58 PM
Subject: Is anyone else seeing SMURF ?

I'm seeing alot of ICMP Type 8 lately. Could be the W32.Welchia.Worm, a.k.a
W32/Nachi-A. Infected hosts looking for more victims.
 http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.html

Gary


---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Federal, September 29-30 (Training), 
October 1-2 (Briefings) in Tysons Corner, VA; the world's premier 
technical IT security event.  Modeled after the famous Black Hat event in 
Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.  
Symantec is the Diamond sponsor.  Early-bird registration ends September 6.Visit us: www.blackhat.com
----------------------------------------------------------------------------