[nsp] Filter based forwarding

[micky]

Hi

I just don't know how to tell nachi-worm and normal icmp
How do I differentiate difference between them ?



Regards,
Micky
----- Original Message ----- 
From: "Ken Hays" <hays at acns.fsu.edu>
To: "micky" <micky at apol.com.tw>
Cc: "james" <hackerwacker at cybermesa.com>; <cisco-nsp at puck.nether.net>; "Blaz
Zupan" <blaz at inlimbo.org>
Sent: Thursday, November 06, 2003 2:09 AM
Subject: Re: [nsp] Filter based forwarding


> Micky, If you mean tracert under a M$ OS then you are correct.
> The M$ tracert uses ICMP echo request (ping) packets to do the
> traceroute rather than UDP packets like Unix platforms.
>
> Non-M$ traceroute utilities for the M$ OS exist. Some are free.
> Good luck, Ken
>
> micky wrote:
> >
> > Dear james
> >
> > How do I verify this filter is working ?
> > I used ping with carrying different bytes in the windows,it still
> > worked,wasn't dropped by this filter
> > And I also found traceroute was dropped
> >
> > It's strange !!
>  ...omitted text
> -- 
>  ---------------------------------------------------------------------
>  Kenneth M. Hays                                hays at acns.fsu.edu
>  Academic Computing and Network Services        aka kmh8 at the NIC
>  Florida State University                       voice=850-644-2591x129
>  2035 East Paul Dirac Drive                     fax=850-644-8722
>  Tallahassee, Florida 32306-2760                eFax=773-913-0894
>  ---------------------------------------------------------------------
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>