OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: [Snort-users] 13 instances of ping bsd
From: Todd Backman (toddflyingcroc.net)
Date: Tue Nov 28 2000 - 00:43:09 CST

I am curious if the 13 diff IP's were from unassigned IP space of major
bandwidth providers?

- Todd

On Tue, 28 Nov 2000, Mark Rowlands wrote:

> [**] IDS152 - PING BSD [**]
> 11/27-22:49:21.777738 0:80:C8:56:FB:5 -> 0:10:4B:B6:F1:7B type:0x800 len:0x62
> 203.197.173.129 -> 62.5.7.17 ICMP TTL:56 TOS:0x0 ID:55074
> ID:23472 Seq:51862 ECHO
> 08 09 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 ................
> 18 19 1A 1B 1C 1D 1E 1F 20 21 22 23 24 25 26 27 ........ !"#$%&'
> 28 29 2A 2B 2C 2D 2E 2F 30 31 32 33 34 35 36 37 ()*+,-./01234567
> 38 39 3A 3B 3C 3D 3E 3F 89:;<=>?
>
> =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
>
> hi folks, got 13 of these within millisecs of each other all different IPs
> but apparently same mac address...... none of the addresses have shown up
> before or since. any thoughts?
> _______________________________________________
> Snort-users mailing list
> Snort-userslists.sourceforge.net
> http://lists.sourceforge.net/mailman/listinfo/snort-users
>

_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
http://lists.sourceforge.net/mailman/listinfo/snort-users