freebsd-ports/security/zombiezapper/pkg-descr

Zombie Zapper works against Trinoo, TFN, and Stacheldraht. Assuming
that the default passwords have not been changed, you can simply use
the same commands that an attacker would use to stop the flood. On
Trinoo, it does stop the daemon entirely (although it is typically
set to be restarted by cron, silently awaiting more commands), but
on TFN and Stacheldraht the flooding just stops. This gives you the
advantage of telling the daemon to stop flooding without stopping
the daemon, allowing you to take a little more time in tracking down
where they are, and more importantly, how they got there in the first
place.

WWW: http://razor.bindview.com/tools/ZombieZapper_form.shtml
Zombiezapper sends commands to DDoS agents to stop flooding, leaving them around for further forensics. As with most of the DDoS tools, this assumes the agents are using the default settings. 2000-02-20 10:29:12 +00:00			`Zombie Zapper works against Trinoo, TFN, and Stacheldraht. Assuming`
			`that the default passwords have not been changed, you can simply use`
			`the same commands that an attacker would use to stop the flood. On`
			`Trinoo, it does stop the daemon entirely (although it is typically`
			`set to be restarted by cron, silently awaiting more commands), but`
			`on TFN and Stacheldraht the flooding just stops. This gives you the`
			`advantage of telling the daemon to stop flooding without stopping`
			`the daemon, allowing you to take a little more time in tracking down`
			`where they are, and more importantly, how they got there in the first`
			`place.`

			`WWW: http://razor.bindview.com/tools/ZombieZapper_form.shtml`