[Snort-users] Fw: [ronny at ...1040...: lhr.skitter.caida.org]

Ronny Huybrechts ronny at ...1040...
Sat Jun 9 04:34:33 EDT 2001

Their scan was notified by Snort running on our network,
just to let you guys know !

----- Oorspronkelijk bericht ----- 
Van: Daniel Andersen 
Aan: ronny at ...1040... 
CC: skitter-configs at ...2203... 
Verzonden: zaterdag, juni 09, 2001 2:41
Onderwerp: Re: [ronny at ...1040...: lhr.skitter.caida.org]

The pinging is actually part of a large scale global, publicly funded,
Internet measurement initiative that is developing connectivity,
routing, and performance information about the wide area

We use low-intensity (about one 52-byte packet per hour)
traceroute-like measurements of forward IP paths ('hops') from a
source to many destinations.  Some destinations may see a higher
packet rate if they are part of some particular sub-study.  For
example, our current study of root servers employs a higher packet

We have thousands of destinations in the experiment so far - so many
that it is impossible to contact and obtain permission from all
destination host administrators.

Our policy is to immediately remove any destination host if they
request that we stop pinging.  If you would like to be removed from
our destination host list, please reply to this email, including the
IP addresses of the affected host(s), and we will deactivate those

For more information about the project and the tools that we
are using, please visit our web site at:


Thank you for your patience in this matter, please feel free
to contact me if you have any further questions.

Daniel E Andersen
dea at ...2203...
phone (858) 822-0901
fax (858) 534-5117

cc:  Dr. K Claffy, PhD
     CAIDA Principal Investigator
     kc at ...2203...

On Thu, 7 Jun 2001, k claffy wrote:

> ----- Forwarded message from Ronny Huybrechts <ronny at ...1040...> -----
>   From: "Ronny Huybrechts" <ronny at ...1040...>
>   To: <kc at ...2204...>
>   Subject: lhr.skitter.caida.org
>   Date: Thu, 7 Jun 2001 23:41:42 +0200
>   Dear Sir,
>   Please check your systems or subscriber,
>   we don't like being scanned several times
>   without reason and/or notification.
>   lhr.skitter.caida.org [web site]
>   IP:
>   Regards,
>   Ronny

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20010609/7b0a5d42/attachment.html>

More information about the Snort-users mailing list