Skip to Content.
Sympa Menu

wg-multicast - Re: MSDP SA explosion - sasser worm?

Subject: All things related to multicast

List archive

Re: MSDP SA explosion - sasser worm?


Chronological Thread 
  • From: "Bruce Curtis" <>
  • To: <>, "UND SIRT list " <>, <>, <>
  • Cc: <>, <>, <>, <>
  • Subject: Re: MSDP SA explosion - sasser worm?
  • Date: Mon, 3 May 2004 16:20:55 -0500 (CDT)
  • Importance: Normal


> We'll get on it

I just cut off Multicast connectivity to the rest of the North Dakota
state network. NDSU is still connected via multicast but we have
blocked most of the SASSER scanners and continue to block them as they
pop up.

>
> On 3 May 2004 Bill Owens wrote:
>
>> On Mon, May 03, 2004 at 12:45:26PM -0700, Greg Shepherd wrote:
>> >
>> > Yup, I see it too. Though it appears only a few AS's are suspect at
>> this time:
>> >
>> > ASN: S/G
>> >
>> > 6263: 9211/9206
>>
>> That one appears to be the leader from here as well. Anyone on here
>> from Northern Lights, who could kill that MSDP peer until things calm
>> down?
>>
>> Bill.
>>
>>
>
>
>
> =================================================
> David Farmer Email:
>
> Office of Information Technology
> University of Minnesota Phone: 612-626-0815
> 2218 University Ave SE Cell: 612-812-9952
> Minneapolis, MN 55414-3029 FAX: 612-624-4035
> =================================================


--
Bruce Curtis

Certified NetAnalyst II 701-231-8527
North Dakota State University







Archive powered by MHonArc 2.6.16.

Top of Page