Urgent: Welchi/Nachi worm and ICMP

[Doug Pearson <dodpears () INDIANA EDU>]

Several universities have reported that the Welchia, aka Nachi[1], worm is
generating very significant ICMP echo request traffic on internal and external
networks. Reports of serious network degradation due to the levels of ICMP
traffic have been received. Some universities report taking temporary measures
to block all internal, outbound, and inbound ICMP.

[1] http://isc.sans.org/diary.html?date=2003-08-18

Doug Pearson
REN-ISAC, Acting Director
Indiana University
ren-isac () iu edu

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.