[Techtalk] ARP traffic

Subba Rao subba9 at home.com
Tue Sep 18 18:35:58 EST 2001


On  0, Subba Rao <subba9 at home.com> wrote:
> 
> It looks like there is a lot of ARP traffic on the Internet again. We have seen
> it gradually subside after the CodeRed worm. Does anyone have any idea why this
> increase in ARP traffic?
> 

For those who use Procmail to filter email and want to trap the Nimda trojan,
here is a receipe:

:0 B
* >50000
* <90000
* ^Content-Type: audio/x-wav;$  name="readme.exe"
quarentine-dir

-- 

Subba Rao
subba9 at home.com                     http://members.home.net/subba9/
OpenPGP/GPG public key ID CCB7344E

 => Time is relative. Here is a new way to look at time. <=
http://www.smcinnovations.com




More information about the Techtalk mailing list