North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Cisco, Qwest, Cert, NIPC (was Re: Code Red -> Router Memory depletion? )

  • From: Marshall Eubanks
  • Date: Fri Jul 20 00:30:41 2001 
>
>The Code Red traffic is starting to have a measureable impact on
>global Internet traffic.  The Internet Health Report (Keynote)
>and the Internet Weather Report (Matrix) are showing packet loss
>increasing and reachability decreasing throughout the afternoon.
>Latency didn't start increasing until this evening.
>
>Keynote is showing problems in QWEST's network, and Slashdot
>is reporting that QWEST has widely deployed a version of the
>Cisco 67x DSL router which is vulnerable to a HTTP data
>corruption error caused byt the worm.
>
>http://www.cisco.com/warp/public/707/CBOS-multiple.shtml
>
>CERT/CC and the National Information Protection Center issued
>advisories today.  I don't know at what time, since it hasn't
>appeared in my e-mail yet.  But it is available on the NIPC 
>and CERT/CC web sites.
>
>http://www.nipc.gov/
>http://www.cert.org/
>
>

Sean;

Is there any evidence that the worm attacks are quasi 
periodic ? I saw
waves of packet loss on vBNS to Columbia U. this afternoon in multicast, with
bad loss roughly every one minute out of 5 or so. 
This happened much of the afternoon, and is pretty unusual.

                             Regards 
                             Marshall Eubanks