Ethereal-users: [Ethereal-users] Repository for capture filters?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Roger Smith <rogers@xxxxxxxx>
Date: Wed, 17 Nov 2004 11:58:47 -0800
I asked this question awhile back but got little, if any, response.
I think it would be good to have a location (in the FAQ?) to keep helpful capture filters for various exploits. I have two from a while back. 

Welchia:
cmp[icmptype]==icmp-echo and ip[2:2]==92 and icmp[8:4]==0xAAAAAAAA

Blaster:
dst port 135 and tcp port 135 and ip[2:2]==48
As more experience Ethereal users write elegant filters for an exploit, it would be good to have a specific location where other users could go to get them and help clean their networks. 

Thanks!


Roger Smith                       | Opinions are my own.
Application Manager               | Reunited Adoptee
Tulare County Office of Education | Owner of CA Adoptees Mailing List
559-733-6027   FAX 559-625-9581   | Moderator of soc.adoption.adoptees