[Dshield] labrea listens for ARP

Susan pobox2 at pinn.net
Sun Mar 17 19:08:42 GMT 2002

I think John is right, it doesn't listen on ports, it listens for ARP 
resquests.  That's the request for a connection coming in via the router.

Erick Brockway wrote:

I was under the impression it listened on port 80, since that's the nature
of nimda and code red attacks. Every connection I've seen was on 80.

More information about the list mailing list