Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Nachi

Status
Not open for further replies.

dgagne316

IS-IT--Management
Nov 6, 2001
13
US
Has anyone figured out if CW2K, nGenius/IPM or DFM has the capability to detect the Nachi worm (92 byte ICMP type 80) signature/symptoms (ICMP echo storm, etc.) and alert upon detection? This would include any way to detect/alert upon a large deviation from a baseline count of ICMP deny ACL statements. Any help in configuring any of these tools would be appreciated. Thank you. -dg

Denny G
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top