OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: [Snort-users] 13 instances of ping bsd
From: Joe Stewart (jstewartlurhq.com)
Date: Tue Nov 28 2000 - 08:21:41 CST

On Tuesday 28 November 2000 00:47, you wrote:
> hi folks, got 13 of these within millisecs of each other all different IPs
> but apparently same mac address...... none of the addresses have shown up
> before or since. any thoughts?

These are coming from Internap/pnap.net in cooperation with lots of different
backbone providers, as a means to map the fastest routes for their customers.
I believe Internap has co-located DNS servers all over the world for this
purpose, that are designed to issue coordinated pings and report on latency
to a target host back to their network. There have been some mentions of it
on incidentssecurityfocus.com and sans.org.

-Joe 

-- 
Joe Stewart
Information Security Analyst 
LURHQ Corporation
==========================>
http://www.lurhq.com/
jstewartlurhq.com
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
http://lists.sourceforge.net/mailman/listinfo/snort-users