RE: Strange echo requests from 127.0.0.1 apparentlytoroot nameservers
"Smith, Donald" <[email protected]>
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
DEC made the tulip chipset. Which is commonly used in high-speed (GIGE) PCI network cards. Compaq bought DEC. So it could be a GIGE card or a Compaq system that is using this mac address. Does your local switch have a mac entry for this ethernet address? [email protected] GCIA pgpFingerPrint:9CE4 227B B9B3 601F B500 D076 43F1 0767 AF00 EDCC Everyday is virus day. Do you know where your recovery CDs are? Did u create them yet? > -----Original Message----- > From: [email protected] > [mailto:[email protected]] On Behalf Of Terje Trane > Sent: Monday, August 30, 2004 1:53 AM > To: 'Intrusions List (GCIA Practicals)' > Subject: RE: [Intrusions] Strange echo requests from > 127.0.0.1 apparentlytoroot nameservers > > > Ken Connelly wrote: > > 08:00:2b belongs to DEC, if that helps you pinpoint the > > traffic. -ken > > Yes I know. Interresting since we have no DEC equipment in > our offices, > (this is a small office with only a dozen nodes so I am > pretty shure I have > control) > > > _______________________________________________ > Intrusions mailing list > [email protected] > http://www.dshield.org/mailman/listinfo/intrusions > > _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions