Great Circle Associates Firewalls
(October 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Win95/SNMP
From: Jeff Murphy <jcmurphy @ smurfland . cit . buffalo . edu>
Date: Mon, 14 Oct 1996 13:01:51 -0400 (EDT)
To: sansom @ connectix . com (Rob Sansom)
Cc: firewalls @ GreatCircle . COM
In-reply-to: <199610141552 . IAA28518 @ apu . connectix . com> from "Rob Sansom" at Oct 14, 96 08:52:21 am

Rob Sansom insists:
>
>Recently, we have been getting SNMP scans from various locations.  I have 
>been in contact with the Sysadmins at these sites, and it seems to be 
>related to Win95.  The scans start at xxx.xxx.xxx.255 and end at 
>xxx.xxx.xxx.1, and encompass multiple subnets.  Does anyone know what 
>'feature' of Win95 might be causing this? 


we've had this happen from one site .. where they were running HP's 
JetDirect utility to monitor their network printers. apparently (they
determined) the latest version had a bug in it where it was polling
the entire class-A that they were in (for example, we're in 128.x.x.x
and they are also..) for some reason.

they backed off to a previous release and this seemed to fix it.


References:
  • Win95/SNMP
    From: Rob Sansom <sansom @ connectix . com>
Indexed By Date Previous: Re: NT Firewalls
From: Jean-Francois Zwobada <zwobada @ apogee-com . fr>
Next: Re: Excellent host SYN-attack fix for BSD hosts (fwd)
From: Mike Shaver <shaver @ neon . ingenia . ca>
Indexed By Thread Previous: Win95/SNMP
From: Rob Sansom <sansom @ connectix . com>
Next: www web security !
From: "T.Kodera" <BZH01572 @ niftyserve . or . jp>

Google
 
Search Internet Search www.greatcircle.com