nanog mailing list archives
Re: The minutes seem like hours (was Re: Symantec detected Slammer worm "hours" before)
From: William Warren <hescominsoon () adelphia net>
Date: Sat, 15 Feb 2003 11:16:40 -0500
Give it time..i bet Symantec will get some serious egg on its face...either they are really stretching the truth or the are outright lying.
Sean Donelan wrote:
According to Wired, Symantec is now saying they sent out an alert to their paying customers about 30 minutes (9pm PST) before the SQL slammer worm was detected by anyone else around 9:30pm PST. I have not seen a copy of the Symantec message. The first problem report on Nanog was 13 minutes after the worm was widely detected at 12:43amEST (9:43pm PST) concerning Level 3 issues. The first Nanog report about port 1434 was 1:28am EST. There was some discussion on some private mail lists earlier, but I have not seen any reports prior to 9:25pm PST (12:25am EST or 05:25 UTC). I suspect some of the early firewall logs were clock skew issues, so 05:30 UTC plus or minus 5 minutes.
-- May God Bless you and everything you touch. My "foundation" verse:Isaiah 54:17 No weapon that is formed against thee shall prosper; and every tongue that shall rise against thee in judgment thou shalt condemn. This is the heritage of the servants of the LORD, and their righteousness is of me, saith the LORD.
Current thread:
- Re: Symantec detected Slammer worm "hours" before, (continued)
- Re: Symantec detected Slammer worm "hours" before David Lesher (Feb 13)
- Re: Symantec detected Slammer worm "hours" before Mike Lloyd (Feb 13)
- Re: Symantec detected Slammer worm "hours" before Jack Bates (Feb 13)
- Bumps on the Net (was Re: Symantec detected Slammer worm "hours") Sean Donelan (Feb 13)
- Re: Symantec detected Slammer worm "hours" before Martin Hannigan (Feb 13)
- Re: Symantec detected Slammer worm "hours" before Krzysztof Adamski (Feb 13)
- Re: Symantec detected Slammer worm "hours" before Etaoin Shrdlu (Feb 13)
- The minutes seem like hours (was Re: Symantec detected Slammer worm "hours" before) Sean Donelan (Feb 14)
- Re: The minutes seem like hours (was Re: Symantec detected Slammer worm "hours" before) Mike Lewinski (Feb 15)
- Re: The minutes seem like hours (was Re: Symantec detected Slammer worm "hours" before) Peter Salus (Feb 15)
- Re: The minutes seem like hours (was Re: Symantec detected Slammer worm "hours" before) William Warren (Feb 15)
- The minutes seem like hours (was Re: Symantec detected Slammer worm "hours" before) Sean Donelan (Feb 14)
- RE: Symantec detected Slammer worm "hours" before Terry Baranski (Feb 23)
- Re: Symantec detected Slammer worm "hours" before Glen Fillmore (Feb 24)
- Re: Symantec detected Slammer worm "hours" before David Howe (Feb 24)
- Re: Symantec detected Slammer worm "hours" before Scott Francis (Feb 25)
- Re: Symantec detected Slammer worm "hours" before Glen Fillmore (Feb 24)