[55123] in North American Network Operators' Group
Re: New worm / port 1434?
daemon@ATHENA.MIT.EDU (Eric Gauthier)
Sat Jan 25 11:35:01 2003
Date: Sat, 25 Jan 2003 10:49:01 -0500
From: Eric Gauthier <eric@roxanne.org>
To: nanog@merit.edu
In-Reply-To: <Pine.LNX.4.51.0301250358460.3531@potnoodle.l-w.net>; from lost@l-w.net on Sat, Jan 25, 2003 at 04:00:03AM -0700
Errors-To: owner-nanog-outgoing@merit.edu
Ok,
I'm not sure if this helps at all. Our campus has two primary connections -
the main Internet and something called Internet2. Internet2 has a routing
table of order 10,000 routes and includes most top-tier research instituations
in the US (and a few other places). By 1am this morning (Eastern US time),
all of our Internet links saturated outbound but we didn't appear to see any
noticable increase in our Internet2 bandwidth. I'm throwing this out there
because it may indicate that the destinations for the traffic - though large -
aren't completely random.
Has anyone else seen this?
Eric :)
PS: Yep - we're a university and we're a source - big surprise there... I
just filtered out our 200Mbps contribution to this problem in case you're
curious...
