OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Assistance and advice request
From: Greg A. Woods (woodsWEIRD.COM)
Date: Fri Jul 28 2000 - 15:06:24 CDT

[ On Thursday, July 27, 2000 at 16:39:28 (-0400), Kirklin Spencer wrote: ]
> Subject: Assistance and advice request
>
> Situation one. Very Large ICMP packet.

Likely someone checking to see if you've got a Path-MTU problem or not.

> Situation two. Slow Scan.

If this is a web server then the pings are probably coming from web
cache servers, such as Squid. 

--
							Greg A. Woods

+1 416 218-0098      VE3TCP      <gwoodsacm.org>      <robohack!woods>
Planix, Inc. <woodsplanix.com>; Secrets of the Weird <woodsweird.com>