RE: NTP attack message

Hi, marc,

You are right. Thanks a lot!

Chuming

-----Original Message-----
From: Marc Spitzer [mailto:[email protected]] 
Sent: Monday, March 31, 2003 11:06 PM
To: Chuming Chen
Cc: [email protected]; [email protected]
Subject: Re: NTP attack message

On Mon, 31 Mar 2003 22:13:25 -0500
Chuming Chen <[email protected]> wrote:

> Hi, all, 
>  
> I am developing a Nessus client based on NTP.  The attack message I
> used looks like this: 
>  
> "CLIENT <|> NEW_ATTACK <|> 123.41.57.67, 123.41.57.107, congare.cs.edu
> <|> CLIENT"

the spaces between items in your list might be the problem.  The 
ntp_white_paper_11.txt file does not have spaces in the example
for the NEW_ATTACK message, section 22

good luck 

marc

>  
> I think the format of my list of targets is correct. But the server
> can only test the first target and ignore the rest.
>  
> Any idea?
>  
> Thanks,
>  
>  
> Chuming Chen
> Graduate Assistant
> Department of Computer Science of Engineering
> University of South Carolina
> Columbia, SC 29208
> Tel: (803) 777 - 4879 (O) (803) 794-2898 (H)
> Email: [email protected]
> URL: http://www.cse.sc.edu/~chen7/ 
>  
>  
>