From James.Hackett@cwcom.co.uk Sat Jan 13 13:16:53 2001
Date: Thu, 11 Jan 2001 16:42:03 -0000
From: "Hackett, James" <James.Hackett@cwcom.co.uk>
To: "'project@honeynet.org'" <project@honeynet.org>
Subject: Scan 11 - A feeble attempt by me


Question 1:
What is the scan attempting to determine.
?

Question 2:
What is Unique about the scan methodology

The scan is TCP fragmenting the commands so that the IDS system would not 
be able analysis what is happening is  is using spaces to segement the
commands. 

Question 3:
Can you name the scanning tool

Could be the whisker program ? I can not see it  using any CGI threats so i
do 
not believe it is this program but some one using the same principles.



**********************************************************************
This message may contain information which is confidential or privileged.
If you are not the intended recipient, please advise the sender immediately
by reply e-mail and delete this message and any attachments
without retaining a copy.  

**********************************************************************