[80049] in North American Network Operators' Group
Re: New worm?
daemon@ATHENA.MIT.EDU (Adi Linden)
Fri Apr 22 11:12:04 2005
Date: Fri, 22 Apr 2005 10:11:43 -0500
From: Adi Linden <adil@adis.on.ca>
To: Chris Boyd <cboyd@gizmopartners.com>
Cc: nanog@merit.edu
In-Reply-To: <897ad8eaa22d48ad30e7ede9e59e8455@gizmopartners.com>
Errors-To: owner-nanog@merit.edu
> On Apr 22, 2005, at 12:13 AM, Christopher L. Morrow wrote:
> > do you atleast have info about the packet
> > types/destinations/anything-useful ?
> >
>
> Netflow is showing a lot of 1500 byte packets, but many different
> destinations. It looks similar to gnutella traffic. Maybe just a lot
> files to share and our rate shapers are broken.
New filesharing protocol?
Adi
