Re(2): Nimda Probes Stopped

[Ken Eichman <keichman () cas org>]

I second Stuart's observation. At our class-b we're getting many Nimda
probes. But it has dropped off here to roughly 60% of the peak activity 
we recorded (which occurred here roughly around 13:00 EDT). Ken

> We're still seeing several probes per second into a /17, though the rate is
> noisy.  The probe rate is not going up any more - suggesting some degree of
> saturation.  Are you sure someone upstream of you didn't apply some filter?
>
> Stuart.

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com