|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Re: Analysis of "stacheldraht"
Subject: Re: Analysis of "stacheldraht"
From: Jordan Ritter (jpr5
DARKRIDGE.COM)
Date: Fri Dec 31 1999 - 13:34:52 CST
- Next message: Dave Dittrich: "Re: Analysis of "stacheldraht""
- Previous message: LaMont Jones: "Re: Fix for HP-UX automountd/autofs exploit (fwd)"
- In reply to: Dave Dittrich: "Analysis of "stacheldraht""
- Next in thread: Dave Dittrich: "Re: Analysis of "stacheldraht""
- Reply: Jordan Ritter: "Re: Analysis of "stacheldraht""
- Reply: Dave Dittrich: "Re: Analysis of "stacheldraht""
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
# Programs like "ngrep" do not process ICMP packets, so you will not as
# easily (at this point in time) be able to watch for strings in the data
# portion of the ICMP packets (except using the patches to tcpshow from
# Appendix C and patches to sniffit provided in the analysis of TFN).
The latest version of ngrep (1.35) does in fact match ICMP, and has been out
for some time now.
--jordan
- Next message: Dave Dittrich: "Re: Analysis of "stacheldraht""
- Previous message: LaMont Jones: "Re: Fix for HP-UX automountd/autofs exploit (fwd)"
- In reply to: Dave Dittrich: "Analysis of "stacheldraht""
- Next in thread: Dave Dittrich: "Re: Analysis of "stacheldraht""
- Reply: Jordan Ritter: "Re: Analysis of "stacheldraht""
- Reply: Dave Dittrich: "Re: Analysis of "stacheldraht""
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
This archive was generated by hypermail 2b27 : Fri Dec 31 1999 - 19:00:31 CST