Any chance your boxes have IPs starting with 216.? Check against the list here: http://grc.com/dos/attacklog.htm "Remote pings" appear to be becoming a popular DDoS attack method. Article about it here: http://www.newsbytes.com/news/01/167145.html Brian At 08:46 PM 6/26/01, HurricaneIndy@aol.com wrote: >Lately my network has been swamped!! Cut off our internet connection. Then >after probing our network it turns out some computers had TONS of CMD.exe and >PING.exe running!!! These boxes were PINGing like crazy killing the network. > >Has anyone encountered this or can point me to how we got it and how to >rectify it? >Thanks... > >Indy _______________________________________________ Firewalls mailing list Firewalls@lists.gnac.net http://lists.gnac.net/mailman/listinfo/firewalls