All things related to multicast

[Zenon Mousmoulas <>]

Could someone explain what that bug is, and how exactly it is  
reproduced? Perhaps someone who has experienced it previously?

It would also be nice to get feedback from Renater and Surfnet about  
the recent incidents, to see if it is indeed the exact same issue  
being repeated all over again.

Gathering this information and publishing it somewhere (even in the  
archives of this list) would be a good step towards an advisory for  
miniSAPserver maintainers and potential users...

Z.

On 19 Ιουν 2008, at 4:11 ΜΜ, Taylor, Scott J. wrote:

> We now see a nice beach webcam being advertised with miniSAP server.
>
> Group: 233.4.79.42, (?)
>   Source: 145.19.1.183 (mpeg4ip.HZeeland.nl)
>     Rate: 127 pps/1395 kbps(1sec), 1395 kbps(last 10 secs), 869
> kbps(life avg)
>
> I guess we still have people discovering the same bug over and over in
> miniSAP server?
>
> -Scott
>
> -----Original Message-----
> From: Niels den Otter 
> [mailto:]
> Sent: Thursday, June 19, 2008 08:10
> To: Julian Y. Koh
> Cc: 
>
> Subject: Re: SAP storm from 145.19.1.183
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hello Julian,
>
> Julian Y. Koh wrote:
> > We're seeing a SAP storm this morning from 145.19.1.183 in the
> Netherlands
> > starting around 5:30am CDT (GMT-0500).  Anyone else?  We were able to
> block
> > it pretty quickly at our border, so I'm not sure if it's still going
> on.
>
> Yes this traffic came from one of our customers. Our NOC has contacted
> them when we found out and they stopped the SAP application  
> immediately.
>
> I'll try to find out what application they were using and why this  
> went
> so wrong.
>
>
> Regards,
>
> Niels den Otter
> SURFnet
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.8 (MingW32)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iEYEARECAAYFAkhaTIgACgkQDxUhWEap0R7+XwCcDpqAsbRnRPgSjqJz8tvYRVsN
> A1UAmwUY+f1iZGx6ALXutvjtaqUXRNgN
> =qw/3
> -----END PGP SIGNATURE-----