| reply to kpatz
Re: Call for participation! Msgr Spam investigatio said by kpatz:
I don't have the full (raw) UDP headers, but I do have the following information ...**TTL**.
That's all you really need then...but I'm really truely interested if you receive an Spam from a source that is *close* to you. Can you craft a query to your Access db that finds cases where (Powerof2 - TTL) TTL).
Good luck with that one.
--
Lawrence Baldwin
myNetWatchman
The Internet Neighborhood Watch |
|
|
|
kpatzMY HEAD A SPLODEPremium
join:2003-06-13
Manchester, NH | said by NetWatchMan:
That's all you really need then...but I'm really truely interested if you receive an Spam from a source that is *close* to you. Can you craft a query to your Access db that finds cases where (Powerof2 - TTL) TTL).
How *close* are you looking for? Within 10 hops? 5 hops? 2 hops? Let me know and I'll run a query.
In the past 24 hours I've received 62 messenger spams, including one "new" one, a new variant of EasyPopupBlocker. |
|
