Bibliography

1

ArGoSoft FTP Server 1.0 Multiple Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/1227/info/.

2

CERT Advisory CA 1996-06, Cert Coordination Center,
http://www.networkpenetration.com/Gobbler-2.0.1-Alpha1.tar.gz.

3

Ethereal - Network Protocol Analyzer http://www.ethereal.com.

4

AT&T GraphViz http://www.research.att.com/~erg/graphviz.

5

AT&T GraphViz - Documentation
http://www.research.att.com/~erg/graphviz/info/lang.html.

6

Renaud Deraison, Nessus, http://www.nessu.org.

7

Post on dshield.org about FTP EXPLOIT CWD overflow
http://www.dshield.org/pipermail/intrusions/2002-October/005497.php.

8

IEEE OUI assignments http://standards.ieee.org/regauth/oui.

9

GIAC Certification Practical Logs, http://isc.sans.org/logs/Raw.

10

GCIA Practicals http://www.giac.org/GCIA.php.

11

Gobbler 2.0.1alpha
http://www.networkpenetration.com/Gobbler-2.0.1-Alpha1.tar.gz.

12

Stephen Hall, GCIH Practical
http://www.giac.org/practical/GCIH/Stephen_Hall_GCIH.pdf.

13

Ian Martin - GCIA practical http://www.giac.org/practical/GCIA/Ian_Martin_GCIA.pdf.

14

Raffael Marty and Christian Beedgen, AfterGlow
http://afterglow.sourceforge.net.

15

Raffael Marty, GCIA Practical Additional Chapters
http://raffy.ch/projects/Raffael_Marty_GCIA_Additional_Chapters.pdf

16

Martin Roesch, Snort IDS, http://www.snort.org.

17

MySQL Database http://www.mysql.org.

18

New Virus/Worm - Frontpage?
http://lists.jammed.com/incidents/2002/01/0203.html.

19

Snort User Documentation
http://www.snort.org/docs/snort_manual/node10.html.

20

Port 0 OS Fingerprinting by Ste Jones NetworkPenetration.com
http://www.networkpenetration.com/port0.html.

21

Pete Storm - GCIA practical http://www.giac.org/practical/GCIA/Pete_Storm_GCIA.pdf.

22

TESO 7350wurm http://www.packetstormsecurity.org/removed/7350wurm.c.

23

tcpdump/libpcap, http://www.tcpdump.org.

24

Default TTL Values in TCP/IP, http://secfr.nerim.net/docs/fingerprint/en/ttl_default.html,

25

Western Digital http://www.wdc.com.

26

Michal Zalewski P0f v2, http://lcamtuf.coredump.cx/p0f.