Full Disclosure mailing list archives
Re: Worm side effects
From: "Geoincidents" <geoincidents () getinfo org>
Date: Mon, 25 Aug 2003 18:32:02 -0400
From: "Florian Weimer" <fw () deneb enyo de>
AFAIK, the worm uses a standard Windows routine to generate those ICMP packets.
Nope, normal NT ping generates a 60 byte packet not 92 byte. Geo. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Re: JAP back doored, (continued)
- Re: JAP back doored Florian Weimer (Aug 22)
- RE: JAP back doored Drew Copley (Aug 22)
- Re: JAP back doored Florian Weimer (Aug 22)
- Re: JAP back doored felix . roennebeck (Aug 25)
- Re: JAP back doored morning_wood (Aug 25)
- Re: JAP back doored felix . roennebeck (Aug 25)
- Re: JAP back doored morning_wood (Aug 25)
- RE: JAP back doored Jeroen Massar (Aug 25)
- Worm side effects Geo. (Aug 25)
- Re: Worm side effects Florian Weimer (Aug 25)
- Re: Worm side effects Geoincidents (Aug 25)
- Re: Worm side effects Michael Mueller (Aug 25)
- Re: JAP back doored felix . roennebeck (Aug 26)
- Re: JAP back doored Sebastian Niehaus (Aug 22)
- Re: JAP back doored Florian Weimer (Aug 22)
- Re: JAP back doored Azerail (Aug 22)
- Re: JAP back doored felix . roennebeck (Aug 22)
- Re: JAP back doored Azerail (Aug 22)
- Re: JAP back doored felix . roennebeck (Aug 25)