[Dshield] icmp w/payload EEEEEEE

Johannes B. Ullrich jullrich at sans.org
Wed Jan 14 14:09:56 GMT 2004


Nothing here. Can you post some complete packets?
(e.g. using tcpdump -s 1500 -Xa icmp)


On Wed, 2004-01-14 at 08:21, tim0707 at comcast.net wrote:
> I'm still seeing a huge amount of icmp echo requests with the payload of EEEEE.  About 500,000 alerts/day since Jan. 03.  Is anyone else seeing this or is it just me? 
> 
> 
> Thanks,
> 
> Tim Kroeger
> 
> _______________________________________________
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list
-- 
CTO SANS Internet Storm Center               http://isc.sans.org
phone: (617) 837 2807                          jullrich at sans.org 

contact details: http://johannes.homepc.org/contact.htm
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://www.dshield.org/pipermail/list/attachments/20040114/fdf12475/attachment.bin


More information about the list mailing list