OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Mike Blomgren (mike.blomgrenCCNOX.COM)
Date: Fri Jan 12 2001 - 07:20:33 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    citerar marc <marcZOUNDS.NET>:

    > I exchanged email with someone that claimed the problem had been
    > traced back to a Nortel CVX. Can anyone confirm or deny this as an
    issue?
    >
    > marc

    I can't confirm or deny the issue, but I described a similiar case
    about a 'Mysterios s..l..o..w scan' on this list a while back, with
    symptoms in general as described as in this thread - but different in a
    few details. (Search the archives for previous post and details)

    Having done som further research, it turns out that the source of the
    packets we are seeing are all coming through a 'Nortel Networks CVX1800
    RAS. Software version 2.02' according to nmap.

    I was contacted off-list by people also seeing similiar symptoms, but
    we still haven't solved the issue. However my strongest bet is that the
    problem lies within RAS box the users dial into, presumably a Nortel
    CVX.

    Anyone have good 'connection' with Nortel?

    ~Mike