[91877] in North American Network Operators' Group
RE: [Full-disclosure] what can be done with botnet C&C's?
daemon@ATHENA.MIT.EDU (Jordan Medlen)
Thu Aug 17 15:37:50 2006
Reply-To: <jmedlen@sagonet.com>
From: "Jordan Medlen" <jmedlen@sagonet.com>
To: <Valdis.Kletnieks@vt.edu>
Cc: "'Gadi Evron'" <ge@linuxbox.org>, <nanog@nanog.org>
Date: Thu, 17 Aug 2006 15:37:14 -0400
In-Reply-To: <200608171910.k7HJAP1K024934@turing-police.cc.vt.edu>
Errors-To: owner-nanog@merit.edu
Good point. At this time, we are not yet at completion as stated, but
something that could be done for the benefit of others once we have
completed the install and taken into account the amount spent vs. gained as
you stated. I will look to getting something to everyone once our experience
is complete.
Thanks,
Jordan
-----Original Message-----
From: Valdis.Kletnieks@vt.edu [mailto:Valdis.Kletnieks@vt.edu]
Sent: Thursday, August 17, 2006 3:10 PM
To: jmedlen@sagonet.com
Cc: 'Gadi Evron'; nanog@nanog.org
Subject: Re: [Full-disclosure] what can be done with botnet C&C's?
On Thu, 17 Aug 2006 13:55:36 EDT, Jordan Medlen said:
> Thanks for the info. I will pass this to our abuse department to get
> rid of those. We are still tweaking our system and is only about 90%
> deployed, but after all of the efforts to deploy the system, it should
> pay-off many many times over.
Something that would probably help a *lot* (and get some publicity for
yourself and your shop while you're at it :) is to do up a short
presentation or paper discussing what the total aggregate payoff ends up
being. Being able to point at "This company spent $yyyK doing X, Y and Z,
and achieved a total net savings of $x.xM/year" is quite useful when trying
to explain to other sites why they should clean up their networks....
