All things related to multicast

["Taylor, Scott J." <>]

We now see a nice beach webcam being advertised with miniSAP server.

Group: 233.4.79.42, (?)
   Source: 145.19.1.183 (mpeg4ip.HZeeland.nl)
     Rate: 127 pps/1395 kbps(1sec), 1395 kbps(last 10 secs), 869
kbps(life avg)

I guess we still have people discovering the same bug over and over in
miniSAP server?
 
-Scott

-----Original Message-----
From: Niels den Otter 
[mailto:]
 
Sent: Thursday, June 19, 2008 08:10
To: Julian Y. Koh
Cc: 

Subject: Re: SAP storm from 145.19.1.183

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello Julian,

Julian Y. Koh wrote:
> We're seeing a SAP storm this morning from 145.19.1.183 in the
Netherlands
> starting around 5:30am CDT (GMT-0500).  Anyone else?  We were able to
block
> it pretty quickly at our border, so I'm not sure if it's still going
on.

Yes this traffic came from one of our customers. Our NOC has contacted
them when we found out and they stopped the SAP application immediately.

I'll try to find out what application they were using and why this went
so wrong.


Regards,

Niels den Otter
SURFnet
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkhaTIgACgkQDxUhWEap0R7+XwCcDpqAsbRnRPgSjqJz8tvYRVsN
A1UAmwUY+f1iZGx6ALXutvjtaqUXRNgN
=qw/3
-----END PGP SIGNATURE-----