Merit Network
Can't find what you're looking for? Search the Mail Archives.
  About Merit   Services   Network   Resources & Support   Network Research   News   Events   Home

Discussion Communities: Merit Network Email List Archives

North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: looking for Slammer infectee access link speeds

  • From: vern
  • Date: Sun May 02 11:33:48 2004

[resending from my NANOG-posting address, sigh]

> I think a more interesting aspect of this particular worm is that it 
> only takes a single packet to infect a vulnerable host. As far as I 
> know no other worm can do this.

That was true prior to the March "Witty" worm.

> The effect is that even packets to 
> broadcast or multicast address have the potential to infect.

It depends on the specifics of the server being exploited.  (In Witty's
case, it was passive infection!)

> I can tell you some stuff about AS12854.

Thanks!, I'll send you the list off-list.

		Vern




Discussion Communities


About Merit | Services | Network | Resources & Support | Network Research
News | Events | Contact | Site Map | Merit Network Home


Merit Network, Inc.