[44015] in North American Network Operators' Group
Nimda.E = New Worm Request for Trace or Log
daemon@ATHENA.MIT.EDU (Murphy, Brennan)
Wed Oct 31 13:30:10 2001
Message-ID: <B481990C9658D411BD3C009027D6F544024772B1@SNC-5-87.nai.com>
From: "Murphy, Brennan" <Brennan_Murphy@NAI.com>
To: "'nanog@merit.edu'" <nanog@merit.edu>
Date: Wed, 31 Oct 2001 11:30:52 -0600
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Errors-To: owner-nanog-outgoing@merit.edu
If you have a sniffer trace file or a log of the activity of the
new Nimda.E worm that has begun spreading in APAC,
would you kindly send me an email? From those that
reply, I can pick one or two to request they send them to
me. (saves me from getting 100 emails with logs/traces in them)
The new worm is reported here:
http://www.zdnet.com/zdnn/stories/news/0,4586,5098988,00.html
As this article indicates, the fixes for the original Nimda should work
for this as well. Nonetheless, I'm still looking for a trace of it.
Thanks!!
-BM