On Tuesday 09 December 2003 05:47, Lisa Durham wrote: > > Thanks, Mike. > > Are there similar 'worm scans' for Linux boxes? What should I do to > protect my machine from them if there are? (point me towards a good > website or book explaining this if you can.) > > Lisa > There are *nix specific worms too, Windows hasn't cornered the market on them quite yet! Head over to the CERT site for many descriptions of the most often seen worms. Here's a link that may contribute to your particular logs. http://www.cert.org/advisories/CA-2001-26.html Head on over to the archives available at Neohapsis: http://archives.neohapsis.com/ for quite a few lists concerned with computer security or dshield for what's happening with traffic trends and current threats. www.dshield.org Sans and Security Focus are also good sources of timely information: http://www.securityfocus.com/ http://www.sans.org/resources/ Regards, Mike Klinke
