Ethereal-users: [Ethereal-users] Detecting Nimda using Ethereal

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Thread Prev
From: Tom.Kustner@xxxxxxxxxxxxxxxxxxxxxxx
Date: Fri, 30 Nov 2001 18:14:18 -0600
I apologize if this question has been asked before.

I consider myself a *very* casual Ethereal user, but am wondering if a
packet from the Nimda virus has a particular signature and if the source of
a Nimda attack/scan can be detected via packet capture.

Tom Kustner

Any opinions are strictly my own and not necessarily those of Wells Fargo.