My firewall is now logging (and rejecting) 20 "stray" ICMP packets per
minute.  Is there some new Microsoft worm or trojan on the loose?

-- 
"Until we had this concept of Web services, software on the 
 Internet couldn't talk to other software on the Internet."
-- Bill Gates.  Chairman, Microsoft.  10/29/2003.

On 2003-11-20, Jules Dubois <bogus@invalid.tld> wrote:
> My firewall is now logging (and rejecting) 20 "stray" ICMP packets per
> minute.  Is there some new Microsoft worm or trojan on the loose?

More than likely. Were about overdue for another big virus, it's been,
like, a WEEK or something :).

------
"Until we had this concept of Web services, software on the 
 Internet couldn't talk to other software on the Internet."
 -- Bill Gates.  Chairman, Microsoft.  10/29/2003.
------

I read this in the globe and mail. What kinda snake oil is this guy
selling?!? For the head software architect, he sure seems to have some
funny ideers.

Jules Dubois <bogus@invalid.tld> wrote:

>My firewall is now logging (and rejecting) 20 "stray" ICMP packets per
>minute.  Is there some new Microsoft worm or trojan on the loose?

I've been getting these pings for months.  I think it's still the
aftermath of Blaster.

-- 
Bug?  That's not a bug, that's a feature.

Datagram from Tom B incoming on netlink socket
<thjprvcrnk0jgia5n1ocddashh99b7j8ua@4ax.com>. Dumping datagram.
>
> I've been getting these pings for months.  I think it's still the
> aftermath of Blaster.

You are meaning Welchia? Blaster won't make pings, but Welchia does.

-Ilari
-- 
I finally installed emacs in UML after getting sick of @!$!%$ vi, and 
I'm fairly impressed by how quick it is. -- Jeff Dike
Linux LK_Perkele_IV9 2.4.22-rc3 #2 Sun Aug 24 14:36:19 EEST 2003 i686 unknown
  7:32pm  up 67 days,  8:27,  10 users,  load average: 0.02, 0.03, 0.06

On Thu, 20 Nov 2003 14:25:05 +0000, in article
<thjprvcrnk0jgia5n1ocddashh99b7j8ua@4ax.com>, Tom B. wrote:

> Jules Dubois <bogus@invalid.tld> wrote:
> 
>>My firewall is now logging (and rejecting) 20 "stray" ICMP packets per
>>minute.  Is there some new Microsoft worm or trojan on the loose?
> 
> I've been getting these pings for months.  I think it's still the
> aftermath of Blaster.

I've also been getting them for a long time.  I thought there was some sort
of new Microsoft Trustworthy Computing Innovation because of the sudden
increase, which peaked at 35 per minute.  

My count is now back to normal: 5-10 queries from infected Microsoft
Windows systems per minute.  100% of these are from inside Worldnet, so the
actual Windows infection count must be massive.

-- 
"Do not permit SCO to audit your premises without legal authorization."
 -- http://www3.gartner.com/DisplayDocument?doc_cd=118545

Jules Dubois wrote:

> My firewall is now logging (and rejecting) 20 "stray" ICMP packets per
> minute.  Is there some new Microsoft worm or trojan on the loose?
> 



When is there *not* a new windows-borne trojan or virus running around??  As
long as insecure junk OS's exist, the kiddies will always come out to play.


JF

Ilari Liusvaara wrote:

> Datagram from Tom B incoming on netlink socket
> <thjprvcrnk0jgia5n1ocddashh99b7j8ua@4ax.com>. Dumping datagram.
>>
>> I've been getting these pings for months.  I think it's still the
>> aftermath of Blaster.
> 
> You are meaning Welchia? Blaster won't make pings, but Welchia does.
> 

Blaster gives your firewall hits on 135... welchia clogs your snort logs up
with ICMP Cyberkit messages /and/ firewall hits on 135 as well...

it's a pain as I've just had to ssh into my smoothie firewall to clear out
all the logs as my snort kept stopping on every hit cos it couldn't write
to the log anymore.

-- 
COMPUTER POWER TO THE PEOPLE! DOWN WITH CYBERCRUD!

In  <slrnbroe31.184.jason@boron.websterscafe.com>, Handover Phist wrote:
> On 2003-11-20, Jules Dubois <bogus@invalid.tld> wrote:

> ------
> "Until we had this concept of Web services, software on the 
>  Internet couldn't talk to other software on the Internet."
>  -- Bill Gates.  Chairman, Microsoft.  10/29/2003.
> ------
> 
> I read this in the globe and mail. What kinda snake oil is this guy
> selling?!? For the head software architect, he sure seems to have some
> funny ideers.

Do you have *any* idea how much a guy that rich can
afford in altered consciousness?

-- 
begin signature.exe
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing on usenet?