wg-multicast - Re: MSDP SA explosion - sasser worm?
Subject: All things related to multicast
List archive
- From: "Bruce Curtis" <>
- To: <>, "UND SIRT list " <>, <>, <>
- Cc: <>, <>, <>, <>
- Subject: Re: MSDP SA explosion - sasser worm?
- Date: Mon, 3 May 2004 16:20:55 -0500 (CDT)
- Importance: Normal
> We'll get on it
I just cut off Multicast connectivity to the rest of the North Dakota
state network. NDSU is still connected via multicast but we have
blocked most of the SASSER scanners and continue to block them as they
pop up.
>
> On 3 May 2004 Bill Owens wrote:
>
>> On Mon, May 03, 2004 at 12:45:26PM -0700, Greg Shepherd wrote:
>> >
>> > Yup, I see it too. Though it appears only a few AS's are suspect at
>> this time:
>> >
>> > ASN: S/G
>> >
>> > 6263: 9211/9206
>>
>> That one appears to be the leader from here as well. Anyone on here
>> from Northern Lights, who could kill that MSDP peer until things calm
>> down?
>>
>> Bill.
>>
>>
>
>
>
> =================================================
> David Farmer Email:
>
> Office of Information Technology
> University of Minnesota Phone: 612-626-0815
> 2218 University Ave SE Cell: 612-812-9952
> Minneapolis, MN 55414-3029 FAX: 612-624-4035
> =================================================
--
Bruce Curtis
Certified NetAnalyst II 701-231-8527
North Dakota State University
- MSDP SA explosion - sasser worm?, Bill Owens, 05/03/2004
- Re: MSDP SA explosion - sasser worm?, Greg Shepherd, 05/03/2004
- Re: MSDP SA explosion - sasser worm?, Bill Owens, 05/03/2004
- Re: MSDP SA explosion - sasser worm?, David Farmer, 05/03/2004
- Re: MSDP SA explosion - sasser worm?, Bruce Curtis, 05/03/2004
- Re: MSDP SA explosion - sasser worm?, David Farmer, 05/03/2004
- Re: MSDP SA explosion - sasser worm?, Doug Pearson, 05/03/2004
- Re: MSDP SA explosion - sasser worm?, Bill Owens, 05/03/2004
- Re: MSDP SA explosion - sasser worm?, Amel Caldwell, 05/03/2004
- Please filter TCP to 224/4 [was MSDP SA explosion - sasser worm?], Charles R. Anderson, 05/03/2004
- Re: Please filter TCP to 224/4 [was MSDP SA explosion - sasser worm?], Amel Caldwell, 05/04/2004
- Please filter TCP to 224/4 [was MSDP SA explosion - sasser worm?], Charles R. Anderson, 05/03/2004
- Re: MSDP SA explosion - sasser worm?, Bill Owens, 05/04/2004
- Re: MSDP SA explosion - sasser worm?, William F. Maton, 05/04/2004
- Re: MSDP SA explosion - sasser worm?, Marshall Eubanks, 05/04/2004
- Re: MSDP SA explosion - sasser worm?, David Farmer, 05/04/2004
- Re: MSDP SA explosion - sasser worm?, Marshall Eubanks, 05/04/2004
- Re: MSDP SA explosion - sasser worm?, Charles R. Anderson, 05/04/2004
- Re: MSDP SA explosion - sasser worm?, Bill Owens, 05/04/2004
- Re: MSDP SA explosion - sasser worm?, William F. Maton, 05/04/2004
- Re: MSDP SA explosion - sasser worm?, Greg Shepherd, 05/03/2004
Archive powered by MHonArc 2.6.16.