[80042] in North American Network Operators' Group
Re: New worm?
daemon@ATHENA.MIT.EDU (Jon Lewis)
Fri Apr 22 00:29:26 2005
Date: Fri, 22 Apr 2005 00:28:23 -0400 (EDT)
From: Jon Lewis <jlewis@lewis.org>
To: Chris Boyd <cboyd@gizmopartners.com>
Cc: nanog@merit.edu
In-Reply-To: <38d82bb8228ac3d054ca532f67eec485@gizmopartners.com>
Errors-To: owner-nanog@merit.edu
On Thu, 21 Apr 2005, Chris Boyd wrote:
> Several machines on a resnet that I consult for have started spewing
> traffic--50Mbits/sec all the way up to line rate. We're working on
> discoing the affected machines and getting traffic characteristics.
Why new worm? What makes you think they're not just bots participating in
a DDoS?
----------------------------------------------------------------------
Jon Lewis | I route
Senior Network Engineer | therefore you are
Atlantic Net |
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________
