From owner-freebsd-security Mon Dec 13 16:42:41 1999 Delivered-To: freebsd-security@freebsd.org Received: from mail.webct.com (mail.webct.com [209.87.17.10]) by hub.freebsd.org (Postfix) with ESMTP id 4CC0F14C48 for ; Mon, 13 Dec 1999 16:42:33 -0800 (PST) (envelope-from dfoo@ca.webct.com) Received: from ca.webct.com (ws74.webct.com [209.87.17.104]) by mail.webct.com (8.9.3/8.9.3) with ESMTP id QAA17542 for ; Mon, 13 Dec 1999 16:42:32 -0800 (PST) Message-ID: <38559278.C873BC70@ca.webct.com> Date: Mon, 13 Dec 1999 16:42:32 -0800 From: Darren Foo Reply-To: dfoo@webct.com Organization: WebCT Canada X-Mailer: Mozilla 4.7 [en] (X11; U; FreeBSD 3.3-STABLE i386) X-Accept-Language: en MIME-Version: 1.0 To: "'freebsd-security@FreeBSD.ORG'" Subject: SMURF Attack Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org I have over a hundred machines on my network and pinging our broadcast address does reply. MY network seems to be used to attack a UUnet router. Is there a way that I can find out which machines are replying to the broadcast ip? -- Darren Foo To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message