[83047] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Traffic to our customer's address(126.0.0.0/8) seems blocked

daemon@ATHENA.MIT.EDU (Petri Helenius)
Wed Aug 3 15:24:23 2005

Date: Wed, 03 Aug 2005 22:23:35 +0300
From: Petri Helenius <pete@he.iki.fi>
To: Randy Bush <randy@psg.com>
Cc: mkawano@bb.softbank.co.jp, joelja@darkwing.uoregon.edu,
	nanog@merit.edu
In-Reply-To: <17137.4743.465363.888685@roam.psg.com>
Errors-To: owner-nanog@merit.edu


Randy Bush wrote:

>>You can ping to 126.66.0.30/8.
>>    
>>
>
>and how does one ping a /8?
>
>  
>
Most trojans for zombie networks provide this functionality. Connect to 
your favourite C&C server and issue;
.advscan ping 42 2 64 126.X.X.X
(this will ping the address space with 42 threads, using two second 
intervals for packets, the X's work as wildcards)

After the scan has completed, issue .scanstats to view your results.

If you need to stop the pinging in the interim, issue .scanstop to cease.

Pete



home help back first fref pref prev next nref lref last post