[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Modap Worm Infection and Subsequent Scanning

To: Glenn Forbes Fleming Larratt <glratt@xxxxxxxx>
Subject: Re: Modap Worm Infection and Subsequent Scanning
From: Valdis.Kletnieks@xxxxxx
Date: Fri, 27 Sep 2002 09:19:12 -0400
Cc: incidents@xxxxxxxxxxxxxxxxx
Delivered-to: mailing list incidents@xxxxxxxxxxxxxxxxx
Delivered-to: moderator for incidents@xxxxxxxxxxxxxxxxx
Delivery-date: Sat, 28 Sep 2002 00:34:54 +0200
Envelope-to: incidents@xxxxxxxxxxxxxxxxxxxxxxxxxxxxx
In-reply-to: Your message of "Wed, 25 Sep 2002 23:06:19 CDT." <Pine.GSO.4.33.0209252301230.7985-100000@xxxxxxxxxxx>
List-help: <mailto:incidents-help@securityfocus.com>
List-id: <incidents.list-id.securityfocus.com>
List-post: <mailto:incidents@securityfocus.com>
List-subscribe: <mailto:incidents-subscribe@securityfocus.com>
List-unsubscribe: <mailto:incidents-unsubscribe@securityfocus.com>
Mailing-list: contact incidents-help@xxxxxxxxxxxxxxxxx; run by ezmlm
References: <Pine.GSO.4.33.0209252301230.7985-100000@xxxxxxxxxxx>

On Wed, 25 Sep 2002 23:06:19 CDT, Glenn Forbes Fleming Larratt <glratt@xxxxxxxx>  said:

> Every standard traceroute I've seen, though, has sent three packets
> for each (TTL value/UDP destination port) pair. Do I understand
> correctly that you only saw one per?

traceroute -q 1 will send one packet per, -q 8 will send 8, etc.

Attachment: pgpnGnJxW42Xv.pgp
Description: PGP signature

References:
- Re: Modap Worm Infection and Subsequent Scanning
  - From: Glenn Forbes Fleming Larratt

Prev by Date: RE: AIM-based worm?
Next by Date: Re: AIM-based worm?
Previous by thread: Re: Modap Worm Infection and Subsequent Scanning
Next by thread: Port 11890
Index(es):
- Date
- Thread