Re: unusual packet (tcpdump shows): rad-#0 41 [id 0] Attr[

From: James Williams (jwilliamsat_private)
Date: Tue Oct 22 2002 - 08:51:08 PDT

  • Next message: jeffat_private: "Unusual ICMP Traffic"

    Your server is infected with the Slapper Worm. What you need to do is
    contact your ISP and ask them to block udp/1812 at the router coming into
    their network and you need to recompile apache from source with the latest
    packages since red hat or what ever distribution you are using isn't
    patching their compilations of their packages correctly.
    
    James Williams
    Network Systems Technician
    West Texas A&M University
    http://www.wtamu.edu
    Phone: (806) 651-2162
    Email: jwilliamsat_private
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Tue Oct 22 2002 - 16:20:20 PDT