[Dshield] icmp w/payload EEEEEEE
Johannes B. Ullrich
jullrich at sans.org
Wed Jan 14 14:09:56 GMT 2004
Nothing here. Can you post some complete packets?
(e.g. using tcpdump -s 1500 -Xa icmp)
On Wed, 2004-01-14 at 08:21, tim0707 at comcast.net wrote:
> I'm still seeing a huge amount of icmp echo requests with the payload of EEEEE. About 500,000 alerts/day since Jan. 03. Is anyone else seeing this or is it just me?
> Tim Kroeger
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list
CTO SANS Internet Storm Center http://isc.sans.org
phone: (617) 837 2807 jullrich at sans.org
contact details: http://johannes.homepc.org/contact.htm
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://www.dshield.org/pipermail/list/attachments/20040114/fdf12475/attachment.bin
More information about the list