[80045] in North American Network Operators' Group
Re: New worm?
daemon@ATHENA.MIT.EDU (Chris Boyd)
Fri Apr 22 01:22:45 2005
In-Reply-To: <Pine.GSO.4.58.0504220512410.6246@sharpie.argfrp.us.uu.net>
From: Chris Boyd <cboyd@gizmopartners.com>
Date: Fri, 22 Apr 2005 00:22:16 -0500
To: nanog@merit.edu
Errors-To: owner-nanog@merit.edu
On Apr 22, 2005, at 12:13 AM, Christopher L. Morrow wrote:
> do you atleast have info about the packet
> types/destinations/anything-useful ?
>
Netflow is showing a lot of 1500 byte packets, but many different
destinations. It looks similar to gnutella traffic. Maybe just a lot
files to share and our rate shapers are broken.
