[150432] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Botnet Traffic

daemon@ATHENA.MIT.EDU (Darius Jahandarie)
Thu Feb 23 17:27:47 2012

In-Reply-To: <BAB325A54D484A6B8BFE3221C466AA5A@smithwaIntell>
Date: Thu, 23 Feb 2012 17:26:48 -0500
From: Darius Jahandarie <djahandarie@gmail.com>
To: James Smith <james@smithwaysecurity.com>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

On Thu, Feb 23, 2012 at 17:17, James Smith <james@smithwaysecurity.com> wro=
te:
> Can anyone on this list provide botnet network traffic for analysis, or I=
p=E2=80=99s which have been infected.

Have you considered contacting Team Cymru or Shadowserver? As far as I
know, they are the two major groups who collect this sort of
information on a non-local scale. I believe Team Cymru at least has
someone who follows NANOG..

The largest issue here is going to be trust -- it is highly unlikely
your just going to get huge dumps of useful information, especially if
your intentions are for-profit.


Best of luck.

--=20
Darius Jahandarie


home help back first fref pref prev next nref lref last post