nanog mailing list archives

Re: Katrina Network Damage Report


From: JORDI PALET MARTINEZ <jordi.palet () consulintel es>
Date: Sun, 11 Sep 2005 22:28:55 -0500


Suresh,

It seems to me that you're assuming that your access network will be
multi-gigabit in order to support millions of hosts trying to scan each of
your subnets simultaneously in order to finish in time before celebrating a
couple of centuries before now ?

Regards,
Jordi




De: Suresh Ramasubramanian <ops.lists () gmail com>
Responder a: <ops.lists () gmail com>
Fecha: Mon, 12 Sep 2005 07:32:36 +0530
Para: Joel Jaeggli <joelja () darkwing uoregon edu>
CC: Alan Spicer <a_spicer () bellsouth net>, Steve Gibbard <scg () gibbard org>,
<nanog () nanog org>
Asunto: Re: Katrina Network Damage Report


On 12/09/05, Joel Jaeggli <joelja () darkwing uoregon edu> wrote:
Drop me a line when your botnet finishes scanning 3FFE:0000::/16 and moves
on to 2001:xxxx::

It is a v6 botnet - so a correspondingly larger number of infected
hosts, and larger botnet size
If it is your argument that scanning just won't scale on a botnet,
anything can be made to scale if you throw sufficient resources that
aren't your own - botted toasters, like i said - at it

-- 
Suresh Ramasubramanian (ops.lists () gmail com)




Current thread: