Re: [Full-disclosure] Honeypots

2006-09-16 Thread Toby McKay
nepenthes or mwpcollect would work. Also, there is wormradar. ./mcktobyOn 9/17/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: Thanks for the responses. I'm more interested in capturing, analyzing, and collecting as many types as malware as I can, so that I may create a database for my friends an

Re: [Full-disclosure] the world of botnets article and wrong numbers

2006-09-14 Thread Toby McKay
On 9/14/06, 3APA3A <[EMAIL PROTECTED]> wrote: Dear Toby McKay,Number of 12000 is absolutely impossible. Actual number is much higher.i agree its impossible! but on samples (actual bot samples)! ip addresses are a different ridiculous number gadi mentions. he said in the article there i

Re: [Full-disclosure] the world of botnets article and wrong numbers

2006-09-14 Thread Toby McKay
On 9/14/06, Gadi Evron <[EMAIL PROTECTED]> wrote: > hi guys> i ask gadi on the botnets listserv on where he got the number 12K for> bots every month on his the world of botnets article [> http://www.beyondsecurity.com/whitepapers/SolomonEvronSept06.pdfYou did..> ] .. he gave no real answer.> does

[Full-disclosure] the world of botnets article and wrong numbers

2006-09-14 Thread Toby McKay
hi guysi ask gadi on the botnets listserv on where he got the number 12K for bots every month on his the world of botnets article [http://www.beyondsecurity.com/whitepapers/SolomonEvronSept06.pdf ] .. he gave no real answer.does that number sound right to anybody? where did you come up with it gadi