[61938] in North American Network Operators' Group
SoBig volume way down
daemon@ATHENA.MIT.EDU (up@3.am)
Wed Sep 10 14:03:46 2003
Date: Wed, 10 Sep 2003 14:03:03 -0400 (EDT)
From: up@3.am
To: nanog@merit.edu
Errors-To: owner-nanog-outgoing@merit.edu
the volume of SoBig virii hitting our mail server had gotten so big that I
had to have a cron job delete the quarantine every hour. We were
averaging about 400 of them per hour until around midnight last night,
where the volume went to and remains about 1/10th of that. Did this thing
expire (in which case, roughly 10% of all infected machines have
misconfigured clocks, assuming the exp date was in UDT), or did something
else happen? Just curious...
James Smallacombe PlantageNet, Inc. CEO and Janitor
up@3.am http://3.am
=========================================================================
