[ Date Index ][
Thread Index ]
[ <= Previous by date / thread ] [ Next by date / thread => ]
Quoting Luke <luke@xxxxxxxxxxxxxxxxxxxxxxx>: > Today at work eclipse pulled the plug after what they saw as a DOS of > icmp packets were hurled at them by the business park where i work. > Turns out some windows hosts were infected with welchia worm (the one > that fixes the rpc vunerabilty). This little blighter flings pings all > over the subnet on which it presently resides. When it finds a host who > has not been patched, it uses tftp to download the MS rpc patch. > Bandwidth gets sucked up LAN comes to a standstill. That would explain all the dam firewall alerts I am getting - all for ping packets the same subnets. I often see the cable modem light lit solid when no- one is transfering anything. Grr, how *many* more dam worms have to come out, this is the 3rd major one in September alone. Pete Hatton --------------------------------- E-mail: pete@xxxxxxxxxxxxx Webpage: http://www.monolight.org --------------------------------- -- The Mailing List for the Devon & Cornwall LUG Mail majordomo@xxxxxxxxxxxx with "unsubscribe list" in the message body to unsubscribe.