[55444] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

RE: Dropouts since Saturday 1/25/03 only affecting web traffic?

daemon@ATHENA.MIT.EDU (Todd A. Blank)
Wed Jan 29 11:40:20 2003

Date: Wed, 29 Jan 2003 11:40:22 -0500
From: "Todd A. Blank" <todd.blank@ipoutlet.com>
To: <nanog@merit.edu>
Errors-To: owner-nanog-outgoing@merit.edu


I am seeing this as well, but only from a few hosts on a single network.
I have contacted their NOC and asked them to "knock" it off - no pun
intended...

Could be some nimda infected boxes or whatever.  Firewalls are stopping
it, but it is annoying to wade through the logs.

Todd

-----Original Message-----
From: Al Rowland [mailto:alan_r1@corp.earthlink.net]=20
Sent: Wednesday, January 29, 2003 10:31 AM
To: nanog@merit.edu
Subject: RE: Dropouts since Saturday 1/25/03 only affecting web traffic?


A single point of consumer data. I haven't checked by home router logs
since Monday night but I was seeing a pattern of significant incoming
port 80 traffic (I'm not running any services) over the last week or so,
similar to increased 1433/1434 traffic before Saturday's flurry.

Best regards,
______________________________
Al Rowland

> -----Original Message-----
> From: owner-nanog@merit.edu [mailto:owner-nanog@merit.edu] On=20
> Behalf Of Sean Donelan
> Sent: Tuesday, January 28, 2003 9:46 PM
> To: nanog@merit.edu
> Subject: Dropouts since Saturday 1/25/03 only affecting web traffic?
>=20
>=20
>=20
> According to Matrix Systems (http://average.miq.net/Weekly/markR.html)
> there have been two additional dropouts of global Web=20
> reachability on January 26 and January 28.  These dropouts=20
> have been for few hours or so, but nearly as large as we saw=20
> from the SQL worm.  However it doesn't seem to affect other=20
> network services, as measured by Matrix.  Just the measured=20
> web servers.  The most recent was tonight from 3-5pm and=20
> again from 5-7pm EST (http://average.miq.net/)
>=20
> Any ideas what is causing them?  Measurement artifact?  Are=20
> you seeing something strange on your networks about that time?
>=20
>=20
>=20


home help back first fref pref prev next nref lref last post