RE: [cobalt-users] The Code-Red Worm is attacking... GOD it's attacking.

["Gavin Nelmes-Crocker" <gavin@xxxxxxxxxx>]

> > When I do this
> >
> > cat /var/log/httpd/access | grep .ida | wc -l
> >

Hi all, its important to realize that this will also return lines with
hol'ida'y in as it did on my box I discovered a response of 1 this morning
and 10 this afternoon, fearing the worst I looked deeper to find this
answer. Maybe it would be better to change this command to

 cat /var/log/httpd/access | grep default.ida | wc -l

maybe this will create less false alarms

Gavin