Re(2): Nimda Probes Stopped

From: Ken Eichman (keichmanat_private)
Date: Tue Sep 18 2001 - 16:14:22 PDT

  • Next message: Stuart Staniford: "Re: Nimda Probes Stopped"

    I second Stuart's observation. At our class-b we're getting many Nimda
    probes. But it has dropped off here to roughly 60% of the peak activity 
    we recorded (which occurred here roughly around 13:00 EDT). Ken
    
    > We're still seeing several probes per second into a /17, though the rate is
    > noisy.  The probe rate is not going up any more - suggesting some degree of
    > saturation.  Are you sure someone upstream of you didn't apply some filter?
    > 
    > Stuart.
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Tue Sep 18 2001 - 19:43:35 PDT