[nsp-sec] FW: Conficker.C ports from IP

[Jason Chambers]

Smith, Donald wrote:
> I have permission to share these two tools the nsp sec list.
> Conficker.c is a silk plug-in that identified p2p 
> ports based on ip and time and simplifies finding conficker.c 
> p2p comms in netflow. I haven't used it as we don't use silk here.
> 


Thanks to whomever wrote these, especially the silk plugin.

Regards,

-- 

Jason Chambers
UCLA
jchambers at ucla.edu
310-206-5603