As I said before I don't have an externally acessable webserver. So I just dump all incoming packets to port 80. So this stops the problem with the SYN packet. Dean On Fri, Jul 20, 2001 at 11:05:00AM +1200, Juha Saarinen wrote:
How would you do that?
I think each GET request is around 250-260 bytes, if I count it right... not too much, but volume of requests seems to increase rapidly. Up to 20 hits on my home server now.
--
Juha
:: -----Original Message----- :: From: Dean Pemberton [mailto:dean(a)flatnet.gen.nz] :: Sent: Friday, 20 July 2001 11:01 :: To: Juha Saarinen :: Cc: 'Simon Lyall'; nznog(a)list.waikato.ac.nz :: Subject: Re: Full analysis of the .ida "Code Red" worm. :: :: :: I'm dumping the SYN so I get away with that as the only traffic :: ::
--------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog
To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog