Re: What's on udp/2002 ?

From: Jose Nazario (joseat_private)
Date: Wed Sep 18 2002 - 11:36:06 PDT

  • Next message: Guido Van De Velde: "Re: What's on udp/2002 ?"

    On Wed, 18 Sep 2002, Guido Van De Velde wrote:
    
    > At least something very interesting, according to our fw logs. Anyone
    > any idea ?
    
    uh ... linux slapper/modap worm?
    
    	http://www.cert.org/advisories/CA-2002-27.html
    	http://analyzer.securityfocus.com/alerts/020916-Analysis-Modap.pdf
    
    those are the p2p connections between wormnet hosts.
    
    ___________________________
    jose nazario, ph.d.			joseat_private
    					http://www.monkey.org/~jose/
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Wed Sep 18 2002 - 20:50:26 PDT