Snort will tell you in a heartbeat
-Nick
Marc Catuogno wrote:
I had my ISP (dsl.net) call and tell me that there was virus activity on our
circuit, namely port scans on 445 (maybe Sasser?). I have asked all my
agents to run the removal tool and do windows update. I have run Ethereal
but it
Marc,
Why don't you block 445 on the firewall (outbound) and look at the logs to
see where they are coming from?
Darrell
---
Check out http://www.invariantsystems.com for utilities for Declude, Imail,
mxGuard, and ORF. IMail/Declude Overflow Queue
: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Ncl Admin
Sent: Thursday, April 27, 2006 11:04 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Way OT: Find a virus in my network
At 10:29 AM 4/27/2006 -0400, you wrote:
Marc Catuogno writes:
Anyone have any suggestions
of the building
Thanks
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Ncl Admin
Sent: Thursday, April 27, 2006 11:04 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Way OT: Find a virus in my network
At 10:29 AM 4/27/2006 -0400, you
