Re: DNS servers!!

From: McCammon, Keith (Keith.McCammonat_private)
Date: Fri May 04 2001 - 05:58:37 PDT

Next message: Joe Matusiewicz: "Re: Backdoor Q access?"

Previous message: Yotam Rubin: "Spoofed SMB name wildcard probes"
Maybe in reply to: Franky: "DNS servers!!"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

-----Original Message-----
From: Franky [mailto:fcebamanos@GUEST-MAIL.COM]
Sent: Wednesday, May 02, 2001 10:22 PM
To: INCIDENTSat_private
Subject: DNS servers!!
Importance: High


Any idea what would generate the following alerts[**]
194.133.58.129:53 -> a.b.c.42:53 TCP TTL:51 TOS:0x0 ID:13741 IpLen:20
DgmLen:40
******S* Seq: 0x6ACADDF Ack: 0x0 Win: 0x578 TcpLen: 20

Attempted zone transfer has my vote for this one...

Next message: Joe Matusiewicz: "Re: Backdoor Q access?"
Previous message: Yotam Rubin: "Spoofed SMB name wildcard probes"
Maybe in reply to: Franky: "DNS servers!!"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri May 04 2001 - 07:22:56 PDT