[ZODB-Dev] Very Weird Behaviour :-(

[Toby Dickenson]

On Tuesday 10 June 2003 14:39, Chris Withers wrote:

> Where can I find out about strace?

man strace

> > Jamie Heilman
> > posted a very effective memory-eating DOS script to zope-dev over the
> > weekend.
>
> What would requests from that look like?

Anything really - it can a very stealthy exploit. Anything with a Zope-Version 
parameter, but they can be hidden in cookies to evade conventional logs. Lots 
of hits from the same IP would be the only clue.

> Lots of Google, nothing obviouly out of the ordinary...

If you are sufficiently paranoid, you may want to confirm that those were 
cominig from a google IP address using reverse dns.

-- 
Toby Dickenson
http://www.geminidataloggers.com/people/tdickenson