[39647] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Code Red -> Router Memory depletion?

daemon@ATHENA.MIT.EDU (Scott Francis)
Thu Jul 19 15:39:48 2001

Date: Thu, 19 Jul 2001 12:37:37 -0700
From: Scott Francis <darkuncle@darkuncle.net>
To: Mike Lewinski <mike@rockynet.com>
Cc: nanog@merit.edu
Message-ID: <20010719123737.G56424@darkuncle.net>
Mail-Followup-To: Scott Francis <darkuncle@darkuncle.net>,
	Mike Lewinski <mike@rockynet.com>, nanog@merit.edu
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
	protocol="application/pgp-signature"; boundary="m972NQjnE83KvVa/"
Content-Disposition: inline
In-Reply-To: <004d01c11085$114f77c0$c2c68bd0@domain.com>; from mike@rockynet.com on Thu, Jul 19, 2001 at 01:00:24PM -0600
Errors-To: owner-nanog-outgoing@merit.edu



--m972NQjnE83KvVa/
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thu, Jul 19, 2001 at 01:00:24PM -0600, Mike Lewinski exclaimed:
>=20
> We've seen two routers experiencing problems this AM that appear to be
> related to client swervers infected with the IIS Code Red virus. I say
> appear because of the timing with cpu profiles on downstream routers
> where infections broke out, but I don't have any direct evidence.

http://www.securityfocus.com/archive/1/198006

This may or may not be related to the problem you are experiencing, but I
figured it was worth mentioning for those that haven't gotten around to
skimming BUGTRAQ today.

--=20
Scott Francis                   darkuncle@ [home:] d a r k u n c l e . n e t
Systems/Network Manager          sfrancis@ [work:]         t o n o s . c o m
UNIX | IP networks | security | sysadmin | caffeine | BOFH | general geekery
GPG public key 0xCB33CCA7              illum oportet crescere me autem minui

--m972NQjnE83KvVa/
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: For info see http://www.gnupg.org
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=3nTb
-----END PGP SIGNATURE-----

--m972NQjnE83KvVa/--

home help back first fref pref prev next nref lref last post