Nachi down

[REN-ISAC <dodpears () INDIANA EDU>]

Starting the year on a good note for network security...

Supposed to deactivate itself beginning Jan 1, 2004, Nachi appears to be doing just that. The infection will wind down 
as machines are rebooted - Nachi checks the date only on start-up. Aggregate ICMP echo request stats for Abilene can be 
seen at:
http://stryper.uits.iu.edu/icmp/aggregate-hist.cgi?name=icmp-echo-request

Yes!

Doug Pearson
REN-ISAC
http://www.ren-isac.net


--

Doug Pearson; Indiana University; dodpears () indiana edu
Phone: 812-855-3846; ViDeNet: 0018128553846
PGP: http://mypage.iu.edu/~dodpears/dodpears_pubkey.asc

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.