nanog mailing list archives

Re: New worm?

From: "Christopher L. Morrow" <christopher.morrow () mci com>
Date: Fri, 22 Apr 2005 05:26:50 +0000 (GMT)



On Fri, 22 Apr 2005, Chris Boyd wrote:



On Apr 22, 2005, at 12:13 AM, Christopher L. Morrow wrote:

do you atleast have info about the packet
types/destinations/anything-useful ?


Netflow is showing a lot of 1500 byte packets, but many different
destinations.  It looks similar to gnutella traffic.  Maybe just a lot
files to share and our rate shapers are broken.


probably also it says ports and protocol?

Current thread:

New worm? Chris Boyd (Apr 21)
- Re: New worm? Jon Lewis (Apr 21)
- Re: New worm? Peter John Hill (Apr 22)
- <Possible follow-ups>
- Re: New worm? Chris Boyd (Apr 21)
  - Re: New worm? Christopher L. Morrow (Apr 21)
    - Re: New worm? Chris Boyd (Apr 21)
    - Re: New worm? Christopher L. Morrow (Apr 21)
    - Re: New worm? Adi Linden (Apr 22)