lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
From: malware at t-online.de (Michael Mueller) Subject: Worm side effects Hi Geoincidents, you wrote: > > AFAIK, the worm uses a standard Windows routine to generate those ICMP > > packets. > > Nope, normal NT ping generates a 60 byte packet not 92 byte. You still can be both right ;-) The standard Windows routine as of Windows 2000 does allow sending ICMP echo requests with an arbitary length, see http://msdn.microsoft.com/library/default.asp?url=/library/en-us/iphlp/iphlp/icmpsendecho.asp Yes, and the worm does use it to send 92 byte ICMP echo-request packets. Michael -- Linux@...Xpress http://www-users.rwth-aachen.de/Michael.Mueller4/tekxp/tekxp.html
Powered by blists - more mailing lists