Re: [BUGTRAQ] Full analysis of the .ida "Code Red" worm.

From: Vern Paxson (vernat_private)
Date: Thu Jul 19 2001 - 17:26:04 PDT

Next message: Johannes B. Ullrich: "Re: Mitigating some of the effects of the Code Red worm"

Previous message: Vern Paxson: "Re: [BUGTRAQ] Full analysis of the .ida "Code Red" worm."
In reply to: Vern Paxson: "Re: [BUGTRAQ] Full analysis of the .ida "Code Red" worm."
Next in thread: Vern Paxson: "Re: [BUGTRAQ] Full analysis of the .ida "Code Red" worm."
Reply: Vern Paxson: "Re: [BUGTRAQ] Full analysis of the .ida "Code Red" worm."
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

I've put a plot of arrival of new infected hosts as seen at lbl.gov in

	ftp://ftp.ee.lbl.gov/.vp-code-red-spread.ps

It appears that the worm is at this time somewhat contained (though the
fall-off at the very end, and the occasional outages in the plot are all
measurement artifacts), though of course I don't rule out further
methodological glitches.

		Vern

Next message: Johannes B. Ullrich: "Re: Mitigating some of the effects of the Code Red worm"
Previous message: Vern Paxson: "Re: [BUGTRAQ] Full analysis of the .ida "Code Red" worm."
In reply to: Vern Paxson: "Re: [BUGTRAQ] Full analysis of the .ida "Code Red" worm."
Next in thread: Vern Paxson: "Re: [BUGTRAQ] Full analysis of the .ida "Code Red" worm."
Reply: Vern Paxson: "Re: [BUGTRAQ] Full analysis of the .ida "Code Red" worm."
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Thu Jul 19 2001 - 22:42:59 PDT