nanog mailing list archives
Re: 1434 traffic
From: Scott Weeks <surfer () mauigateway com>
Date: Sat, 25 Jan 2003 14:27:04 -1000 (HST)
On Sat, 25 Jan 2003, Johannes Ullrich wrote: : : : > What I'm seeing from on my personal network connections is a lot of : > traffic to udp port 1434 start at 05:30:08 UTC. : : I did some graphing of reports we got to DShield/ISC up to 9am EST. : http://isc.sans.org/port1434start.gif : : The part that amazes me is the speed. It saturated within 1 minute! Maybe they read "How to Own the Internet in Your Spare Time?" :-) scott : Does anybody else see the oscillations in traffic? I remember seeing : something similar in netflow data for slapper (2002 udp). Or is this : just an artifact of our particular dataset? : : So far, we got about 80,000 sources (distinct IPs sending port 1434 : packets) : : : : -- : -------------------------------------------------------------------- : jullrich () euclidian com Collaborative Intrusion Detection : join http://www.dshield.org :
Current thread:
- Re: Level3 routing issues?, (continued)
- Re: Level3 routing issues? Hank Nussbacher (Jan 28)
- Re: Level3 routing issues? Haesu (Jan 28)
- Re: Level3 routing issues? Jared Mauch (Jan 28)
- Re: Level3 routing issues? hc (Jan 24)
- RE: Level3 routing issues? Christopher J. Wolff (Jan 25)
- Re: Level3 routing issues? michael (Jan 25)
- Re: Level3 routing issues? william (Jan 25)
- Re: Level3 routing issues? Grant A. Kirkwood (Jan 25)
- 1434 traffic Sean Donelan (Jan 25)
- Re: 1434 traffic Johannes Ullrich (Jan 25)
- Re: 1434 traffic Scott Weeks (Jan 25)
- Re: Level3 routing issues? Blaine Kahle (Jan 25)
- Re: Level3 routing issues? Adam Korab (Jan 25)
- Re: Level3 routing issues? Alex Rubenstein (Jan 25)
- Re: Level3 routing issues? hc (Jan 25)
- Re: Level3 routing issues? Blaine Kahle (Jan 25)
- RE: Level3 routing issues? fingers (Jan 25)