[55374] in North American Network Operators' Group
Re: Level3 routing issues?
daemon@ATHENA.MIT.EDU (cowie@renesys.com)
Tue Jan 28 08:27:42 2003
From: cowie@renesys.com
To: randy@psg.com (Randy Bush)
Date: Tue, 28 Jan 2003 13:24:16 +0000 (GMT)
Cc: cowie@renesys.com, nanog@merit.edu
In-Reply-To: <E18dLHh-00018U-00@roam.psg.com> from "Randy Bush" at Jan 27, 2003 06:15:33 PM
Errors-To: owner-nanog-outgoing@merit.edu
> > Wow, for a minute I thought I was looking at one of our old
> > plots, except for the fact that the x-axis says January 2003
> > and not September 2001 :) :)
>
> seeing that the etiology and effects of the two events were quite
> different, perhaps eyeglasses which make them look the same are
> not as useful as we might wish?
>
> randy
If you've been watching, you might agree that the interesting thing is
not that it looked like that in September 2001, but that we really
haven't seen a signal that looks like that SINCE September 2001.
The large differences between the worms are exactly what should make us
doubly interested in fingering the common mechanism that connects very
high speed, high diversity wormscan to increased bgp activity.
So far it's been visible as an apparently accidental byproduct of an attack
with other goals. Are you willing to bet your bifocals that the same
mechanism can't be weaponized and used against the routing infrastructure
directly in the future?
----------
James Cowie
Renesys Corporation
http://gradus.renesys.com
