[21710] in bugtraq
Re: [BUGTRAQ] Full analysis of the .ida "Code Red" worm.
daemon@ATHENA.MIT.EDU (Vern Paxson)
Fri Jul 20 01:59:03 2001
Message-Id: <200107200026.f6K0Q4u15759@daffy.ee.lbl.gov>
To: Joe Harris <cdi@thewebmasters.net>
Cc: BUGTRAQ <BUGTRAQ@securityfocus.com>
In-reply-to: Your message of Thu, 19 Jul 2001 16:33:19 PDT.
Date: Thu, 19 Jul 2001 17:26:04 PDT
From: Vern Paxson <vern@ee.lbl.gov>
I've put a plot of arrival of new infected hosts as seen at lbl.gov in
ftp://ftp.ee.lbl.gov/.vp-code-red-spread.ps
It appears that the worm is at this time somewhat contained (though the
fall-off at the very end, and the occasional outages in the plot are all
measurement artifacts), though of course I don't rule out further
methodological glitches.
Vern
