On Thu, 29 Jan 2004, Hans-Christian Prytz wrote:
> Henrik Nordstrom <[EMAIL PROTECTED]> writes:
>
> > Exacly what traffic is in the dagbaldet_2702.dmp trace? This looks very
> > odd and the originator of this connection (132.150.0.76:65361) seems to be
> > completely lost.
>
> Exactly. For some
On Tue, 20 Jan 2004, Hans-Christian Prytz wrote:
> I'm trying to do this now, but I haven't been able to reproduce the
> problem in a controlled environment so far.
If you can I would be very interested in tcpdump captures including
payload of the client and server traffic where this poisoning g
"Elsen Marc" <[EMAIL PROTECTED]> writes:
[...]
>
> I never had this but I would suggest finding out whether you
> are dealing with cache poisoning or perhaps 'browser poisoning' due
> to cookie fiddling or whatever due to earlier visit of a malicious site.
> This could easily be done by queryin
>
>
> Hi, I'm having the exact same problem that was discussed (briefly) on
> this list back in December
> (http://www.mail-archive.com/[EMAIL PROTECTED]/msg11
> 526.html)
> except that I'm running on Solaris, and not Linux.
> I can't find anything in the archives other than the first mail, and
