Re: Worm Bandwidth [was Re: Santa Fe city government computers knocked out by worm]

[Rob Thomas <robt () cymru com>]

Hi, Sean.

]       lower bandwidth<---->higher bandwidth

Great ASCII chart.  :)

] Of course, there are some exceptions like a customer with an OC192 uplink
] or an ISP running a web hosting center on a ISDN link.

Another bit to consider is address space.  Code Red discovered
a lot of folks with very small pipes (circa T1) and very large
netblocks (circa /16).  These folks paid a heavy price when
hit with the "scan all IPs in the netblock" worms.

Thanks,
Rob.
-- 
Rob Thomas
http://www.cymru.com
ASSERT(coffee != empty);