ICMP_DDOS Stacheldraht gag server response


Code: p409

Severity: Warning


Description: This event is generated when the Stacheldraht DDoS tool is used.

Impact: This indicates that a Stacheldraht agent exists on the source host and a handler exists on the destination host.

Corrective: Turn of all unnecessary services on hosts. Upgrade to the latest patch level. Use a packet filtering firewall to block inappropriate traffic to the network to prevent hosts from being compromised.