On Sat, 2003-01-25 at 21:13, Lorne wrote: > Hey guys here is a new one for me. Our company just got hit with the virus you > will surely hear about on the news. > > One box has a weird problem now. If I send a ping from it or to it, I get two > repsonses back!?!?!? I don't want to drive 40 minutes one way to do a packet > trace to see what is REALLY going on, but may have to. Anybody hear of this > and what could cause it? >
Is this using name or IP? try some traceroute and tcptraceroute tests and look for anomalous or unexpected hops. My guess is that there's spoofing going on -- maybe dsniff, maybe ettercap. -- Jack Coates Monkeynoodle: A Scientific Venture...
Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
