Well on that note, as far as I know the ping's that are generated are
generated from inside the network (ie. 1 ping request comes from your
machine to .0 and .255 then 1 ping request goes to each machine from the
vulnerable host), this would still constitute a smurf would it not?
Cheers,
Kieran
On Mon, 10 Apr 2000, Ryan McBride wrote:
> Hmmm, I thought a smurf attack was merely an attack this is designed to
> attack from inside your network, ie someone somehow gets access to a
> insecure w/sation on your network, infects that, then attacks the primary
> target through that machine, working on the principle that you protect your
> machine from the outside world but not your local w/sations & servers.
>
> Please correct me here
> ----- Original Message -----
> From: Kieran <[EMAIL PROTECTED]>
> To: Del <[EMAIL PROTECTED]>
> Cc: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
> Sent: Monday, April 10, 2000 7:00 PM
> Subject: Re: [SLUG] Possible hack attempt ?
>
>
> > Hi all,
> >
> > Isn't this what's generally called a smurf?, well used to be when it
> > worked on vulnerable systems.
> >
> > If I remember rightly, a ping to x.y.z.0 or x.y.z.255 would generate a
> > ping to EVERY ip address from x.y.z.0 to x.y.z.255 from that local
> > machine.
> >
> > Imagine the effect of sending 1000 echo requests to x.y.z.0 and x.y.z.255,
> > you'd have 1000*255*255 (65025000) ping requests sent by only sending 2000
> > echo requests :-).
> >
> > I could be wrong however, but to me it looks like someone is testing to
> > see whether or not your system is vulnerable to this type of attack.
> >
> > Anyone wanna correct me on this?
> >
> > Cheers,
> > Kieran
> >
> > On Mon, 10 Apr 2000, Del wrote:
> >
> > > I'm also starting to see a lot more broadcast ping packets than I'm
> > > used to ... i.e. icmp echo request to address x.y.z.255
> > >
> > > Del
> > > --
> > > SLUG - Sydney Linux Users Group Mailing List - http://www.slug.org.au
> > > To unsubscribe send email to [EMAIL PROTECTED] with
> > > unsubscribe in the text
> > >
> >
> > --
> > SLUG - Sydney Linux Users Group Mailing List - http://www.slug.org.au
> > To unsubscribe send email to [EMAIL PROTECTED] with
> > unsubscribe in the text
> >
>
--
SLUG - Sydney Linux Users Group Mailing List - http://www.slug.org.au
To unsubscribe send email to [EMAIL PROTECTED] with
unsubscribe in the text
