[39982] in North American Network Operators' Group
Re: Hard data on network impact of the "Code Red" worm?
daemon@ATHENA.MIT.EDU (Valdis.Kletnieks@vt.edu)
Mon Jul 30 12:49:33 2001
Message-Id: <200107301648.f6UGmvw14527@foo-bar-baz.cc.vt.edu>
To: Sean Donelan <sean@donelan.com>
Cc: nanog@merit.edu
In-Reply-To: Your message of "Mon, 30 Jul 2001 04:16:12 PDT."
<20010730111612.2308.cpmta@c011.sfo.cp.net>
From: Valdis.Kletnieks@vt.edu
Mime-Version: 1.0
Content-Type: multipart/signed; boundary="==_Exmh_-992062938P";
micalg=pgp-sha1; protocol="application/pgp-signature"
Content-Transfer-Encoding: 7bit
Date: Mon, 30 Jul 2001 12:48:57 -0400
Errors-To: owner-nanog-outgoing@merit.edu
--==_Exmh_-992062938P
Content-Type: text/plain; charset=us-ascii
On Mon, 30 Jul 2001 04:16:12 PDT, Sean Donelan <sean@donelan.com> said:
> I would agree those people may have been severely affected. But 350,000
> hosts isn't that big of a number any more. The Morris Internet Worm
That's 350K hosts that got infected *that we know about*. I'd not be
surprised if a lot of other hosts got infected during the 9 hours CRv2
was on its burn stage that didn't happen to ping any of the sensor boxes
used to identify infected hosts.
--
Valdis Kletnieks
Operating Systems Analyst
Virginia Tech
--==_Exmh_-992062938P
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.8
Comment: Exmh version 2.5 07/09/2001
iQA/AwUBO2WP+XAt5Vm009ewEQJsNQCfWx6k4UBFJAbxaXYdlRF2gr10gSQAoK/s
+3pWBxmlRm8s1w1MHvTWSSsZ
=NNp1
-----END PGP SIGNATURE-----
--==_Exmh_-992062938P--
