wg-multicast - RE: Sasser worm redux ?
Subject: All things related to multicast
List archive
- From: "Michael Hare" <>
- To: "'Marshall Eubanks'" <>, <>
- Subject: RE: Sasser worm redux ?
- Date: Mon, 10 May 2004 14:32:43 -0500
- Importance: Normal
Marshall-
AS 59 turned back up MSDP peering with AS 2381 ~ 12:10 CST. We are
systematically blackholing infected hosts as we find them.
Is this causing problems for people (ie do we need to shut back down?)
What prefix are checking for Wisconsin connectivity? I just checked the
Atlanta Abilene M5 for 128.104/16 and it's in the table.
-Michael
============================W=========
Michael Hare
UW-Madison/WiscNet Network Engineering
Desk: (608) 262-5236
24 Hr Noc: (608) 263-4188
-----Original Message-----
From:
[mailto:]
On Behalf Of Marshall Eubanks
Sent: Monday, May 10, 2004 1:40 PM
To:
Subject: Sasser worm redux ?
MSDP SA's are spiking again, and Wisconsin seems to have dropped off of
the MBGP Internet.
Here is a little info
Marshall
Date of MBGP Dump Mon May 10 12:13:01 EDT 2004
There were 11865 SA-Cache Entries
There were 674 Duplicate S,G Entries
There were 8669 SA-Cache Groups
There were 2529 SA-Cache Sources
There were 299 SA-Cache RPs
There were 167 SA-Cache ASs
The Most Active Group is 224.2.127.254 with 950 members
The Most Active Source is 128.178.14.235 with 1339 groups
The Most Active RP is 129.170.9.157 with 2492 entries
The Most Active AS is 10755 with 2492 entries
There were 8512 Groups with only one Sender
First Octet Histogram
Octet 224 had 1230 entries or 14.19 %
Octet 225 had 523 entries or 6.03 %
Octet 226 had 512 entries or 5.91 %
Octet 227 had 521 entries or 6.01 %
Octet 228 had 506 entries or 5.84 %
Octet 229 had 551 entries or 6.36 %
Octet 230 had 537 entries or 6.19 %
Octet 231 had 530 entries or 6.11 %
Octet 233 had 1105 entries or 12.75 %
Octet 234 had 548 entries or 6.32 %
Octet 235 had 552 entries or 6.37 %
Octet 236 had 517 entries or 5.96 %
Octet 237 had 511 entries or 5.89 %
Octet 238 had 526 entries or 6.07 %
AS 10755 had 2492 entries
AS 26 had 1430 entries
AS 559 had 1363 entries
AS 159 had 1152 entries
- Sasser worm redux ?, Marshall Eubanks, 05/10/2004
- RE: Sasser worm redux ?, Michael Hare, 05/10/2004
- RE: Sasser worm redux ?, Leonard Giuliano, 05/10/2004
- RE: Sasser worm redux ?, shep, 05/10/2004
- RE: Sasser worm redux ?, Amel Caldwell, 05/10/2004
- RE: Sasser worm redux ?, Leonard Giuliano, 05/10/2004
- RE: Sasser worm redux ?, Michael Hare, 05/10/2004
Archive powered by MHonArc 2.6.16.