Traffic to our customer's address(126.0.0.0/8) seems blocked by packet filter

Petri Helenius pete at he.iki.fi
Wed Aug 3 19:23:35 UTC 2005


Randy Bush wrote:

>>You can ping to 126.66.0.30/8.
>>    
>>
>
>and how does one ping a /8?
>
>  
>
Most trojans for zombie networks provide this functionality. Connect to 
your favourite C&C server and issue;
.advscan ping 42 2 64 126.X.X.X
(this will ping the address space with 42 threads, using two second 
intervals for packets, the X's work as wildcards)

After the scan has completed, issue .scanstats to view your results.

If you need to stop the pinging in the interim, issue .scanstop to cease.

Pete





More information about the NANOG mailing list