Re: Code Red gone to sleep?

[Andreas Östling <andreaso () it su se>]

On Wednesday 03 October 2001 01.33, cambria () owt com wrote:
> CR's 10/1 exit was predicted by some of the analyses of CR.

It went to sleep alright, and it was on time.
In case someone is interested, here is a simple graph showing number of 
SYN packets/sec going to port 80 around Oct 1, on a network that had a 
machine infected by CRII (local time is UTC+2).
ftp://ftp.su.se/pub/users/andreas/CRII_oct_1st.jpg

/Andreas

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com