On Sun, 26 Jan 2003, jdow wrote: > From: "Buck" <buck-rh@towncorp.net> > > > What ports are the popular ones for this attack we are under? > > 1434 and 137. What bothers me is the number of ICMP probes coming through > of late. That's unusual; and, I don't know what it is yet. They seem to be > originating almost anywhere. FWIW I am seeing them here also. I too am courious but do not have a clue as to what is going on. Also I seem to be seeing more ICMP probes than drops for 1433 and 1434. I do not think that means much of anything but.... -- .............Tom "Nothing would please me more than being able to tdiehl@rogueind.com hire ten programmers and deluge the hobby market with good software." -- Bill Gates 1976 We are still waiting .... -- Psyche-list mailing list Psyche-list@redhat.com https://listman.redhat.com/mailman/listinfo/psyche-list