Re: Your focus-ms / focus-ids posting...
From: Jose Nazario (jose@biocserver.BIOC.cwru.edu)Date: 09/19/01
- Previous message: Bill Pool: "Snort and SourceFire Commercial Support"
- In reply to: Naseer Bhatti: "Re: Your focus-ms / focus-ids posting..."
- Next in thread: Greg Shipley: "Re: Your focus-ms / focus-ids posting..."
- Reply: Greg Shipley: "Re: Your focus-ms / focus-ids posting..."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 19 Sep 2001 11:42:05 -0400 (EDT) From: Jose Nazario <jose@biocserver.BIOC.cwru.edu> To: Naseer Bhatti <naseer@fibre.net.pk> Subject: Re: Your focus-ms / focus-ids posting... Message-ID: <Pine.LNX.4.30.0109191140370.14233-100000@biocserver.BIOC.CWRU.Edu>
On Wed, 19 Sep 2001, Naseer Bhatti wrote:
> The alarming one is server1.sans.org (167.216.133.33 )
my best guess so far is an attempt to DoS the SANS server offline with
flooding traffic. i just don't think SANS would be associated, even
remotely (ie a rogue employee), with something like this.
just my guess.
____________________________
jose nazario jose@cwru.edu
PGP: 89 B0 81 DA 5B FD 7E 00 99 C3 B2 CD 48 A0 07 80
PGP key ID 0xFD37F4E5 (pgp.mit.edu)
- Previous message: Bill Pool: "Snort and SourceFire Commercial Support"
- In reply to: Naseer Bhatti: "Re: Your focus-ms / focus-ids posting..."
- Next in thread: Greg Shipley: "Re: Your focus-ms / focus-ids posting..."
- Reply: Greg Shipley: "Re: Your focus-ms / focus-ids posting..."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]