Hi Steve, On Thu, 9 Aug 2001, you wrote:
Ok, to expound a little here, I am using the content matching features of the Alteon AD4 to redirect any incoming GET request that has the string "default.ida" in it - this is possible as any traffic coming in internationally comes in through the switch at some point before it hits the customer network.
Is it possible to filter on part of the shell code payload? At least one CR variant doesn't request default.ida - rendering it useless (I assume), but that should let you see those hits, and allow genuine default.ida requests through... Best regards, James McGlinn Consultant Entertainz * NZ Web Hosting Solutions http://www.entertainz.co.nz/ --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog