Mailing List Archive

On Mon, 31 Mar 2003 22:13:25 -0500
Chuming Chen <chen7@engr.sc.edu> wrote:

> Hi, all,
>
> I am developing a Nessus client based on NTP. The attack message I
> used looks like this:
>
> "CLIENT <|> NEW_ATTACK <|> 123.41.57.67, 123.41.57.107, congare.cs.edu
> <|> CLIENT"

the spaces between items in your list might be the problem. The
ntp_white_paper_11.txt file does not have spaces in the example
for the NEW_ATTACK message, section 22

good luck

marc

>
> I think the format of my list of targets is correct. But the server
> can only test the first target and ignore the rest.
>
> Any idea?
>
> Thanks,
>
>
> Chuming Chen
> Graduate Assistant
> Department of Computer Science of Engineering
> University of South Carolina
> Columbia, SC 29208
> Tel: (803) 777 - 4879 (O) (803) 794-2898 (H)
> Email: chen7@engr.sc.edu
> URL: http://www.cse.sc.edu/~chen7/
>
>
>

Hi, marc,

You are right. Thanks a lot!

Chuming

-----Original Message-----
From: Marc Spitzer [mailto:mspitze1@optonline.net]
Sent: Monday, March 31, 2003 11:06 PM
To: Chuming Chen
Cc: nessus-devel@list.nessus.org; nessus@list.nessus.org
Subject: Re: NTP attack message

On Mon, 31 Mar 2003 22:13:25 -0500
Chuming Chen <chen7@engr.sc.edu> wrote:

> Hi, all,
>
> I am developing a Nessus client based on NTP. The attack message I
> used looks like this:
>
> "CLIENT <|> NEW_ATTACK <|> 123.41.57.67, 123.41.57.107, congare.cs.edu
> <|> CLIENT"

the spaces between items in your list might be the problem. The
ntp_white_paper_11.txt file does not have spaces in the example
for the NEW_ATTACK message, section 22

good luck

marc

>
> I think the format of my list of targets is correct. But the server
> can only test the first target and ignore the rest.
>
> Any idea?
>
> Thanks,
>
>
> Chuming Chen
> Graduate Assistant
> Department of Computer Science of Engineering
> University of South Carolina
> Columbia, SC 29208
> Tel: (803) 777 - 4879 (O) (803) 794-2898 (H)
> Email: chen7@engr.sc.edu
> URL: http://www.cse.sc.edu/~chen7/
>
>
>