Re: FW: Lab report on slammer worm

[Dan Updegrove <updegrove () MAIL UTEXAS EDU>]

Mark and colleagues --

This feedback on IU the lab report from William Green, who manages the UT
Austin data network:

        We noticed three factors which effected load on routers. Traffic
rates and multicast, as they mentioned in their report, but also ARP for
unkown hosts which they did not mention in their report (more of an issue
for edge routers, or specific to router configuration).

        We experience I2 inflicted multicast damage years ago and took
precautions on our gateway router. Even with those precautions, multicast
continues to be a point of vulnerability. Multicast is an experimental and
thus far unsupportable protocol.

Thanks again for circulating the report.

Regards,
Dan


At 04:13 PM 2/25/2003, Bruhn, Mark S. wrote:

> I have to admit that I have only scanned this report thus far, but I
> wanted to get it out.
>
> (It is from our Applied Network Management Lab, which is one of the IU
> Pervasive Computing Labs,
> <http://www.pervasive.iu.edu/>http://www.pervasive.iu.edu/.  The ANML
> supports the REN-ISAC with advanced research and tools.)
>
> Speaking of the ISAC, if you haven't see it --
> <http://www.nipc.gov/pressroom/pressrel/NIPCandIU.htm>http://www.nipc.gov/pressroom/pressrel/NIPCandIU.htm.
>
>
> M.
>
> --
> Mark S. Bruhn, CISSP
> Chief IT Security and Policy Officer
> Office of the Vice President for Information Technology and CIO
> Indiana University
> 812-855-0326
>
> Incidents involving IU IT resources: it-incident () iu edu
> Complaints/kudos about OVPIT/UITS services: itombuds () iu edu
>
> <<SLAMMER.pdf>>
> ********** Participation and subscription information for this EDUCAUSE
> Discussion Group discussion list can be found at
> http://www.educause.edu/memdir/cg/.


VP  for Information Technology          Phone (512) 232-9610
The University of Texas at Austin       Fax (512) 232-9607
FAC 248 (Mail code: G9800)              d.updegrove () its utexas edu
P.O. Box 7407                                   http://wnt.utexas.edu/~danu/

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/memdir/cg/.
Austin, TX 78713-7407