Re: Your focus-ms / focus-ids posting...

From: Jose Nazario (jose@biocserver.BIOC.cwru.edu)
Date: 09/19/01


Date: Wed, 19 Sep 2001 11:42:05 -0400 (EDT)
From: Jose Nazario <jose@biocserver.BIOC.cwru.edu>
To: Naseer Bhatti <naseer@fibre.net.pk>
Subject: Re: Your focus-ms / focus-ids posting...
Message-ID: <Pine.LNX.4.30.0109191140370.14233-100000@biocserver.BIOC.CWRU.Edu>

On Wed, 19 Sep 2001, Naseer Bhatti wrote:

> The alarming one is server1.sans.org (167.216.133.33 )

my best guess so far is an attempt to DoS the SANS server offline with
flooding traffic. i just don't think SANS would be associated, even
remotely (ie a rogue employee), with something like this.

just my guess.

____________________________
jose nazario jose@cwru.edu
                           PGP: 89 B0 81 DA 5B FD 7E 00 99 C3 B2 CD 48 A0 07 80
                                       PGP key ID 0xFD37F4E5 (pgp.mit.edu)