sniffer/promisc detector

Wed Jan 21 16:40:15 UTC 2004

On Wed, 21 Jan 2004 15:58:14 +0100, Ruben van der Leij <ruben-nanog at nutz.nl>  said:

> Somebody who isn't smart enough to do 'nmap -p 0-65535 $target' isn't worth
> diverting.

I'm sure everybody who got whacked by Lion or CodeRed or Blaster or.... are
glad to hear those attacks weren't worth diverting.

The point is that if somebody is doing 'nmap -p 0-65535' at you, you are a *specific*
target, and not one of the "get a probe every 4 minutes" targets that every machine
on the wire is.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20040121/5628c22a/attachment.sig>