[40114] in North American Network Operators' Group
Re: Code Red growth stats
daemon@ATHENA.MIT.EDU (Steven M. Bellovin)
Wed Aug 1 22:36:35 2001
From: "Steven M. Bellovin" <smb@research.att.com>
To: k claffy <kc@ipn.caida.org>
Cc: nanog@nanog.org
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Date: Wed, 01 Aug 2001 22:35:46 -0400
Message-Id: <20010802023546.7B1097B59@berkshire.research.att.com>
Errors-To: owner-nanog-outgoing@merit.edu
In message <20010801190627.A7553@caida.org>, k claffy writes:
>
>hmm, not sure about that, smb.
>
>albeit crippled caida monitor (we're working on it),
>it does seem to have reversed slope again:
>http://www.caida.org/analysis/security/code-red/aug1-live-hosts.gif
Fascinating; thanks. SANS hasn't updated their plots lately, so I
can't compare. Anyone else with any data to post? (On the other hand
-- any chance that the dip recorded at CAIDA is due to the measurement
problems?)
If it has indeed turned up again, I'm at a loss to explain it. While
I'm sure there are some IIS servers on home machines, I doubt there are
that many. But I don't have another explanation to offer.
--Steve Bellovin, http://www.research.att.com/~smb
