Merit Network
Can't find what you're looking for? Search the Mail Archives.
  About Merit   Services   Network   Resources & Support   Network Research   News   Events   Home

Discussion Communities: Merit Network Email List Archives

North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: The minutes seem like hours (was Re: Symantec detected Slammerworm "hours" before)

  • From: William Warren
  • Date: Sat Feb 15 11:21:41 2003


Give it time..i bet Symantec will get some serious egg on its face...either they are really stretching the truth or the are outright lying.

Sean Donelan wrote:
According to Wired, Symantec is now saying they sent out an alert to their
paying customers about 30 minutes (9pm PST) before the SQL slammer worm
was detected by anyone else around 9:30pm PST.

I have not seen a copy of the Symantec message.

The first problem report on Nanog was 13 minutes after the worm was widely
detected at 12:43amEST (9:43pm PST) concerning Level 3 issues.  The first
Nanog report about port 1434 was 1:28am EST.  There was some discussion on
some private mail lists earlier, but I have not seen any reports prior to
9:25pm PST (12:25am EST or 05:25 UTC).  I suspect some of the early
firewall logs were clock skew issues, so 05:30 UTC plus or minus 5
minutes.





--
May God Bless you and everything you touch.

My "foundation" verse:
Isaiah 54:17 No weapon that is formed against thee shall prosper; and every tongue that shall rise against thee in judgment thou shalt condemn. This is the heritage of the servants of the LORD, and their righteousness is of me, saith the LORD.





Discussion Communities


About Merit | Services | Network | Resources & Support | Network Research
News | Events | Contact | Site Map | Merit Network Home


Merit Network, Inc.