RE: [MLUG - DISCUSSION] Code Red II

["Spurling, Shannon " <EMAIL:PROTECTED>]

Yes it is. In fact, you might see arps for stuff that get no response, or
incomplete arps. A lot of those. That's something you don't see unless you
have something like code red or a port scan. If you think about it, it's
because people don't normally connect to devices that don't have a name and
aren't on 24x7, because they are trying to connect to servers. You don't
normally have to arp for a workstation, because it is normally initiating
the connection, and will arp for the gateway. Any router worth it's salt
will automatically store the IP and mac address for incoming packets into
it's arp table.  

Shannon Spurling
WAN Engineer -Specialist

MOREnet, Network Services, Core Network
3212 Le Mone Industrial Blvd.
Columbia, MO 65201

Main:(573) 884-7200   Fax:(573)884-6673

EMAIL:PROTECTED
EMAIL:PROTECTED

-----Original Message-----
From: c w [mailto:EMAIL:PROTECTED]
Sent: Sunday, August 05, 2001 9:54 PM
To: EMAIL:PROTECTED
Subject: Re: [MLUG - DISCUSSION] Code Red II


I'm on @home too and the modem has been showing very
busy for the past couple or three days.  Doing an
ethereal run, I'm seeing huge numbers of arps.  Anyone
know offhand if that's a byproduct of CodeRed?  I'll
try google...

Chris


--- Ian Monroe <EMAIL:PROTECTED> wrote:
> I'll answer my own question. I just installed Apache
> for Win32 and the log
> is filling up. My cable modem is blinking a lot,
> probably because I have
> two IP address's on one modem. At incidents.org I
> found a program that
> *nix users can use:
> http://www.unixwiz.net/tools/websnarf.html
> 
> I checked some of the ip address's and none of them
> are actual web
> pages. They are all under construction or Error 403.
> This makes
> sense; people running servers when they don't even
> realise it.
> 
> It said on slashdot that it is the 24.* ip's that
> are getting hit the
> most, which is certainly the case (I have @home so I
> have 24. ip address).
> 
> Ian


__________________________________________________
Do You Yahoo!?
Make international calls for as low as $.04/minute with Yahoo! Messenger
http://phonecard.yahoo.com/
--
To manage your subscription, go to http://mlug.missouri.edu/members/edit.php

Archives are available at http://mlug.missouri.edu/list-archives/
--
To manage your subscription, go to http://mlug.missouri.edu/members/edit.php

Archives are available at http://mlug.missouri.edu/list-archives/