Code Red packet dumps.

From: Yotam Rubin (yotamat_private)
Date: Mon Jul 23 2001 - 07:13:06 PDT

Next message: Bronek Kozicki: "Re: code red - some questions"

Previous message: Jon O .: "Wide-scale Code Red Damage Assessment and Report"
Next in thread: L. Christopher Paul: "Re: Code Red packet dumps."
Reply: L. Christopher Paul: "Re: Code Red packet dumps."
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hi,

	Does anyone here have extensive packet dumps of the behavior of 
a host after it has been infected with the Code Red worm? A day's worth
of packets of an infected host would be great, but I welcome anything.

	Regards, Yotam Rubin

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: Bronek Kozicki: "Re: code red - some questions"
Previous message: Jon O .: "Wide-scale Code Red Damage Assessment and Report"
Next in thread: L. Christopher Paul: "Re: Code Red packet dumps."
Reply: L. Christopher Paul: "Re: Code Red packet dumps."
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Mon Jul 23 2001 - 11:12:34 PDT