hello,
i have just read a story over at slashdot (
Slashdot 1 and
slashdot 2 ) about this new Trojan that is sending out ( odd ) data, the only notable thing about this virus/Trojan/zombie thing is that it sets its window size at 55808.
and it got me thinking ( Better get the aspirin
),
1) are there any other programs and/or network appliances out there that set their window size to this?
2) can i add a rule to my iptables to block and then log it? ( Primarily out of curiosity )
any ideas people?