Re: NTP attack message

Marc Spitzer <[email protected]>
Newsgroups gmane.comp.security.nessus.general,gmane.comp.security.nessus.devel
Message-ID <[email protected]>
On Mon, 31 Mar 2003 22:13:25 -0500
Chuming Chen <[email protected]> wrote:

> Hi, all, 
>  
> I am developing a Nessus client based on NTP.  The attack message I
> used looks like this: 
>  
> "CLIENT <|> NEW_ATTACK <|> 123.41.57.67, 123.41.57.107, congare.cs.edu
> <|> CLIENT"

the spaces between items in your list might be the problem.  The 
ntp_white_paper_11.txt file does not have spaces in the example
for the NEW_ATTACK message, section 22

good luck 

marc

>  
> I think the format of my list of targets is correct. But the server
> can only test the first target and ignore the rest.
>  
> Any idea?
>  
> Thanks,
>  
>  
> Chuming Chen
> Graduate Assistant
> Department of Computer Science of Engineering
> University of South Carolina
> Columbia, SC 29208
> Tel: (803) 777 - 4879 (O) (803) 794-2898 (H)
> Email: [email protected]
> URL: http://www.cse.sc.edu/~chen7/ 
>  
>  
>
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.