>Gene Spafford's written quite a good paper on the worm; >I'm pretty sure it's available at ftp.cert.org. It contains >partial decompiled versions of the original src code. There is also a large collection of security related materials at coast.cs.purdue.edu Mike Hines Purdue CERT member ---------------------------------------------------------------------- Internet: mshines@ia.purdue.edu | Michael S. Hines Bitnet: michaelh@purccvm | Sr. Information Systems Auditor Purdue WIZARD Mail: MSHINES | Purdue University GTE Net Voice: (317) 494-5845 | 1065 Freehafer Hall GTE Net FAX: (317) 496-1814 | West Lafayette, IN 47907-1065 CompuServe: 73240,1631 |