[no subject]

On Thu, 9 Dec 2004, Michael H. Warfield wrote:

> 	"Dark addresses" and "dark networks" are terms that are in use by
> some of us and some of us (I for one) run dark networks.  These are also,
> sometimes, referred to as "net telescopes".  They are addresses (public,
> advertised, and fully routable) which have nothing on them and and configured
> to not even return errors or ICMP returns.  Thus they are "dark" or "black
> hole" addresses.  Packets route in, nothing ever comes back.  The largest
> "dark network" I know of, for sure, is Cadia's /8 net telescope (mine
> is a bit less than a /17).  These are what, at least in the security
> community, are referred to as "dark addresses" or "dark networks".
>
> 	I also have some addresses which are "grey".  They respond to
> pings "ICMP ECHO request and reply" but everything else is black holed.
> That's set up for "bump and bite" malware that likes to ping an address
> first and then attempt to connect to a target.  But that's not as
> much in common use as the term "dark net" or "dark address" to refer
> to addresses which are totally black holed and totally dark.

Thanks for the explanation. 

What are dark nets used for, other than for keeping track of viruses/worms 
that attempt to scan IP addresses and make connections.

Who funds this service ? And how do they profit ?

Thanks,
sriad



</pre>
<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->
<hr>
<ul><li><strong>Follow-Ups</strong>:
<ul>
<li><strong><a name="00419" href="msg00419.html">[ale] [OT] Voicepulse question</a></strong>
<ul><li><em>From:</em> mhw at wittsend.com (Michael H. Warfield)</li></ul></li>
</ul></li></ul>
<!--X-Follow-Ups-End-->
<!--X-References-->
<ul><li><strong>References</strong>:
<ul>
<li><strong><a name="00407" href="msg00407.html">[ale] [OT] Voicepulse question</a></strong>
<ul><li><em>From:</em> mhw at wittsend.com (Michael H. Warfield)</li></ul></li>
</ul></li></ul>
<!--X-References-End-->
<!--X-BotPNI-->
<ul>
<li>Prev by Date:
<strong><a href="msg00408.html">[ale] WPS Format documents</a></strong>
</li>
<li>Next by Date:
<strong><a href="msg00410.html">[ale] WPS Format documents</a></strong>
</li>
<li>Previous by thread:
<strong><a href="msg00407.html">[ale] [OT] Voicepulse question</a></strong>
</li>
<li>Next by thread:
<strong><a href="msg00419.html">[ale] [OT] Voicepulse question</a></strong>
</li>
<li>Index(es):
<ul>
<li><a href="maillist.html#00409"><strong>Date</strong></a></li>
<li><a href="threads.html#00409"><strong>Thread</strong></a></li>
</ul>
</li>
</ul>

<!--X-BotPNI-End-->
<!--X-User-Footer-->
<!--X-User-Footer-End-->
</body>
</html>