nanog mailing list archives

Re: New worm?


From: Adi Linden <adil () adis on ca>
Date: Fri, 22 Apr 2005 10:11:43 -0500


On Apr 22, 2005, at 12:13 AM, Christopher L. Morrow wrote:
do you atleast have info about the packet
types/destinations/anything-useful ?


Netflow is showing a lot of 1500 byte packets, but many different
destinations.  It looks similar to gnutella traffic.  Maybe just a lot
files to share and our rate shapers are broken.

New filesharing protocol?

Adi


Current thread: