HP3000-L Archives

November 2002, Week 3

HP3000-L@RAVEN.UTC.EDU

Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
Reply To:
Date:
Wed, 20 Nov 2002 15:36:53 -0500
Content-Type:
text/plain
Parts/Attachments:
text/plain (51 lines)
I wish I had a good explanation for your problem. I do not.

But this has to be the single funniest thing I have heard all day. While a
configuration error could conceivably be causing the 3000 to issue erroneous
requests, I would question the awareness of anyone who would suggest that
your 3000 has a virus. Still, you have a golden moment, to get someone to
sign off on budgetary approval for your purchase of McAfee/iX or NAV/iX
(with apologies to Brian), whose cost just happens to be, coincidentally,
that of whatever item you have been unable to get approved. ;-) In fact, to
be on the safe side, there are also some hardware upgrades that will provide
the redundancy and capacity yadda yadda yadda

Greg Stigers
http://www.cgiusa.com
I speak for myself.
This should not be construed as work product from CGI,
or you would have already been invoiced.

> -----Original Message-----
> From: Eric Sand - STL [mailto:[log in to unmask]]
> Sent: Wednesday, November 20, 2002 1:14 PM
> To: [log in to unmask]
> Subject: Wayward packets
>
>
> Hi Folks,
>     This morning I received a call from one of our network
> people in the
> main office, where we had just re-installed our 918 from
> Monterey, and he
> said a virus had compromised the box and was transmitting
> ICMP packets to
> various addresses, some belonging to our customers and others
> seemingly
> random. I doubted this was happening, but he said he was positive the
> packets emanated from the HP3000. He also said they were
> encapsulated in a
> "SWIPE" protocol that predates IPSEC and that they were
> encapsulated PING
> packets.
>
>     Has anyone had a similar situation or is there an
> explanation for this?
>
>
>           Eric Sand
>           [log in to unmask]

* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *

ATOM RSS1 RSS2