[Snort-users] ICMP PING CyberKit 2.2 rule falsing on "PingPlotter"

The Robber of Zork robber at ...915...
Tue Aug 26 22:14:48 EDT 2003

begin  K Anderson  quotation:

> I'm up to 10K Cyberkit 2.2's in a 24 hour period. According to ACID. I 
> have my firewall just denying them. Really nutso here.

Is this Cyberkit 2.2 garbage being generated by the worms running
around, or by (gulp) Windoze users trying to "secure" their sites?

Beware The Robber of Zork

More information about the Snort-users mailing list