Re: Cuervo, I disagree: ShareSniffer Released

Article View: comp.security.firewalls

Article #103

Back to comp.security.firewalls Previous Next

#103

From: John Navas
Date: Mon, 26 Feb 2001 15:42

18 lines
2355 bytes

[POSTED TO comp.dcom.modems.cable; PLEASE REPLY THERE]

In <MPG.1503be36f44f72a3989701@news.earthlink.net>, Rebeccah Prastein
<rhp@fgi.net> wrote:

>But making that TCP connection is NOT analogous to entering a 
>building.  It is analogous to turning a doorknob.  You apply the force 
>to the knob (SYN).  The knob responds by turning (SYN-ACK).  You can 
>then push on the door to enter, or maybe you need a key (password).

I suggest you put a packet sniffer on the line and look at what is
really going on.  These aren't SYN Floods (a different form of abuse);
they are attempts to connect.

-- 
Best regards,
John Navas     <http://navasgrp.home.att.net/>
     CABLE MODEM/DSL GUIDE:  <http://Cable-DSL.home.att.net/>

Technical Details

Message-ID: <hPum6.4139$S25.63391@typhoon.sonic.net>

Path:

arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!supernews.com!news.gv.tsc.tdk.com!falcon.america.net!sunqbc.risq.qc.ca!newsswitch.lcs.mit.edu!howland.erols.net!newsfeed.skycache.com!Cidera!typhoon.sonic.net!not-for-mail

References:

<3A966412.9336DCD8@mynetwatchman.com> <qvig9tobv9597b8fmhp5bohg701i8ftbtk@4ax.com> <qO9m6.4024$S25.60081@typhoon.sonic.net> <t5nj9t4vvua0ovclofd9fcidjgfqmjnk2m@4ax.com> <97cngt$mop$2@news.panix.com> <mAmm6.4120$S25.62449@typhoon.sonic.net> <MPG.1503be36f44f72a3989701@news.earthlink.net>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,b3c453f70036b961
X-Google-Attributes: gidf922c,public
X-Google-Thread: 113850,b3c453f70036b961
X-Google-Attributes: gid113850,public
X-Google-Thread: f5dc1,b3c453f70036b961
X-Google-Attributes: gidf5dc1,public
X-Google-Thread: 10090f,b3c453f70036b961
X-Google-Attributes: gid10090f,public
X-Google-ArrivalTime: 2001-02-26 07:43:15 PST
Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!supernews.com!news.gv.tsc.tdk.com!falcon.america.net!sunqbc.risq.qc.ca!newsswitch.lcs.mit.edu!howland.erols.net!newsfeed.skycache.com!Cidera!typhoon.sonic.net!not-for-mail
From: John Navas <spamfilter@navasgrp.dublin.ca.us>
Newsgroups: comp.security.firewalls,bellsouth.net.security,comp.dcom.xdsl,comp.dcom.modems.cable
Subject: Re: Cuervo, I disagree: ShareSniffer Released
Organization: The Navas Group, Dublin, CA, USA
References: <3A966412.9336DCD8@mynetwatchman.com> <qvig9tobv9597b8fmhp5bohg701i8ftbtk@4ax.com> <qO9m6.4024$S25.60081@typhoon.sonic.net> <t5nj9t4vvua0ovclofd9fcidjgfqmjnk2m@4ax.com> <97cngt$mop$2@news.panix.com> <mAmm6.4120$S25.62449@typhoon.sonic.net> <MPG.1503be36f44f72a3989701@news.earthlink.net>
X-Newsreader: Forte Agent 1.8/32.548
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Lines: 18
Message-ID: <hPum6.4139$S25.63391@typhoon.sonic.net>
Date: Mon, 26 Feb 2001 15:42:05 GMT
NNTP-Posting-Host: 209.204.185.87
X-Complaints-To: abuse@sonic.net
X-Trace: typhoon.sonic.net 983202125 209.204.185.87 (Mon, 26 Feb 2001 07:42:05 PST)
NNTP-Posting-Date: Mon, 26 Feb 2001 07:42:05 PST

Reply to Parent Message