[150432] in North American Network Operators' Group
Re: Botnet Traffic
daemon@ATHENA.MIT.EDU (Darius Jahandarie)
Thu Feb 23 17:27:47 2012
In-Reply-To: <BAB325A54D484A6B8BFE3221C466AA5A@smithwaIntell>
Date: Thu, 23 Feb 2012 17:26:48 -0500
From: Darius Jahandarie <djahandarie@gmail.com>
To: James Smith <james@smithwaysecurity.com>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Thu, Feb 23, 2012 at 17:17, James Smith <james@smithwaysecurity.com> wro=
te:
> Can anyone on this list provide botnet network traffic for analysis, or I=
p=E2=80=99s which have been infected.
Have you considered contacting Team Cymru or Shadowserver? As far as I
know, they are the two major groups who collect this sort of
information on a non-local scale. I believe Team Cymru at least has
someone who follows NANOG..
The largest issue here is going to be trust -- it is highly unlikely
your just going to get huge dumps of useful information, especially if
your intentions are for-profit.
Best of luck.
--=20
Darius Jahandarie