Any chance your boxes have IPs starting with 216.?
Check against the list here:
http://grc.com/dos/attacklog.htm
"Remote pings" appear to be becoming a popular DDoS attack method. Article
about it here:
http://www.newsbytes.com/news/01/167145.html
Brian
At 08:46 PM 6/26/01, [EMAIL PROTECTED] wrote:
>Lately my network has been swamped!! Cut off our internet connection. Then
>after probing our network it turns out some computers had TONS of CMD.exe and
>PING.exe running!!! These boxes were PINGing like crazy killing the network.
>
>Has anyone encountered this or can point me to how we got it and how to
>rectify it?
>Thanks...
>
>Indy
_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls
