Skip to Content.
Sympa Menu

wg-multicast - Re: SAP storm from 145.19.1.183

Subject: All things related to multicast

List archive

Re: SAP storm from 145.19.1.183


Chronological Thread 
  • From: Tim Chown <>
  • To: wg-multicast <>
  • Subject: Re: SAP storm from 145.19.1.183
  • Date: Fri, 27 Jun 2008 15:30:13 +0100

On Fri, Jun 27, 2008 at 10:18:38AM -0400, Marshall Eubanks wrote:
> The real long term fix of course is to go to SSM. A single poorly
> crafted piece of software running on one
> machine should not be able to take down a network.

True, but there's still a need to discover content.

I don't see SAP disappearing within a year, so am happy to direct a small
aount of analysis into it, and interested in anyone else considering
likewise (the student would start in Sep/Oct-ish).

Tim

> On Jun 27, 2008, at 10:14 AM, Tim Chown wrote:
>
> >On Thu, Jun 19, 2008 at 09:51:13AM -0400, Bill Owens wrote:
> >
> >>Since this has become a recurring problem I'm going to approach it
> >>through education; telling people not to leave a SAP listener
> >>running on their desktop, and getting them to disable sap listen on
> >>their routers. Hopefully that will be enough. But I wonder whether
> >>it is time to start down the road towards deprecation. . .
> >
> >... which leads to the question of a viable alternative.
> >
> >I'm hoping to have a project student working on the general area next
> >semester. I'd be interested in references to projects that are
> >monitoring existing SAP traffic, with a view to redistributing the
> >information via other means (perhaps RSS-a-like). In our case, we
> >would include IPv6 SAP also.
> >
> >Tim



Archive powered by MHonArc 2.6.16.

Top of Page