Intrusion Detection Systems mailing list archives

Re: Determining when something is NOT random


From: Joshua Stein <jcs () superblock net>
Date: Mon, 24 Jul 2000 10:49:33 -0500

Archive: http://msgs.securepoint.com/ids
FAQ: http://www.ticm.com/kb/faq/idsfaq.html
IDS: http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
HELP: Having problems... email questions to ids-owner () uow edu au
NOTE: Remove this section from reply msgs otherwise the msg will bounce.
SPAM: DO NOT send unsolicted mail to this list.
UNSUBSCRIBE: email "unsubscribe ids" to majordomo () uow edu au
-----------------------------------------------------------------------------
Lance Spitzner <lance () spitzner net> said:
Any tool that can take a list of IP addresses and determine
if they are random or not?

I don't know of any automated tools, but I suppose someone could find a
pattern to it (i.e., last IP in each block with various CIDR blocks).

Could you post a sample of the list?

-- 
joshua stein | jcs () superblock net | pgp key: 2048/D8603211 | http://jcs.org


Current thread: