Re: ICMP PING CyberKit 2.2 rule falsing on "PingPlotter"

[K Anderson <freebsduser () comcast net>]

James R. Hendrick wrote:
> Hi,
>         I thought someone was really zeroing in on my home system, but it was just me...
>
> Seems that the default payload for PingPlotter (www.pingplotter.com) is all "AAAAAAA"s
>
> Fortunately, you can change it.
>
> Just thought I'd pass this along. Sometimes I run it from work to monitor systems, etc. 
>
> Later,
>
> Jim Hendrick
Lucky you.

I'm up to 10K Cyberkit 2.2's in a 24 hour period. According to ACID. I 
have my firewall just denying them. Really nutso here.



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users