Re: Mini-DoS-Attack?
hi mh
do you see any incoming "icmp requests" ??
that is broadcasting to your entire or portions of your subnet ??
what does tcpdum show ???
root# tcpdump | grep icmp
- the actual sites they may be after is the ip# you are seeing...
and they just using your pc to send the ping to those ip# you see
- smurf attacks if you have multiple machines that is pinging
those targeted ip#
- or you could be the proud recepient of those ping attacks...
c ya
alvin
On 4 Mar 2001, MH wrote:
> I noticed unusual and apparently coordinated ping activity from about
> a dozen of hosts against my box, when I inspected my logs[1] this
> morning.
>
> I'm not especially worried about this regarding my own box (doesn't
> seem to be very efficient...) , but could
> this be a hint, that some of those boxes are compromised and will be
> used in a real (large-scale) attack?
>
> Thanks in advance,
Reply to: