[65395] in North American Network Operators' Group
Re: Worm Bandwidth [was Re: Santa Fe city government computers
daemon@ATHENA.MIT.EDU (Rob Thomas)
Tue Nov 25 09:35:26 2003
Date: Tue, 25 Nov 2003 08:34:47 -0600 (CST)
From: Rob Thomas <robt@cymru.com>
To: Sean Donelan <sean@donelan.com>
Cc: NANOG <nanog@merit.edu>
In-Reply-To: <Pine.GSO.4.44.0311250901220.7424-100000@clifden.donelan.com>
Errors-To: owner-nanog-outgoing@merit.edu
Hi, Sean.
] lower bandwidth<---->higher bandwidth
Great ASCII chart. :)
] Of course, there are some exceptions like a customer with an OC192 uplink
] or an ISP running a web hosting center on a ISDN link.
Another bit to consider is address space. Code Red discovered
a lot of folks with very small pipes (circa T1) and very large
netblocks (circa /16). These folks paid a heavy price when
hit with the "scan all IPs in the netblock" worms.
Thanks,
Rob.
--
Rob Thomas
http://www.cymru.com
ASSERT(coffee != empty);