Ethereal-users: [Ethereal-users] looking for virus or spamming

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Jon Miller" <jlmiller@xxxxxxxxxxxxxxxxxx>
Date: Mon, 05 Dec 2005 09:06:47 +0800
I'm currently looking at a gateway server that seems to have a awful lot of DNS requests and ARP requests.  Not sure if this is correct, but is there a way to home in on virus and spam checking?  I eliminate all valid traffic, but I would like to know if there are certain packets I can look for.  I know this is huge area, if there is something I can look for trim the search I would appreciate it. 

Thanks

Jon