North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

RE: Dropouts since Saturday 1/25/03 only affecting web traffic?

  • From: Todd A. Blank
  • Date: Wed Jan 29 11:42:11 2003

I am seeing this as well, but only from a few hosts on a single network.
I have contacted their NOC and asked them to "knock" it off - no pun
intended...

Could be some nimda infected boxes or whatever.  Firewalls are stopping
it, but it is annoying to wade through the logs.

Todd

-----Original Message-----
From: Al Rowland [mailto:[email protected]] 
Sent: Wednesday, January 29, 2003 10:31 AM
To: [email protected]
Subject: RE: Dropouts since Saturday 1/25/03 only affecting web traffic?


A single point of consumer data. I haven't checked by home router logs
since Monday night but I was seeing a pattern of significant incoming
port 80 traffic (I'm not running any services) over the last week or so,
similar to increased 1433/1434 traffic before Saturday's flurry.

Best regards,
______________________________
Al Rowland

> -----Original Message-----
> From: [email protected] [mailto:[email protected]] On 
> Behalf Of Sean Donelan
> Sent: Tuesday, January 28, 2003 9:46 PM
> To: [email protected]
> Subject: Dropouts since Saturday 1/25/03 only affecting web traffic?
> 
> 
> 
> According to Matrix Systems (http://average.miq.net/Weekly/markR.html)
> there have been two additional dropouts of global Web 
> reachability on January 26 and January 28.  These dropouts 
> have been for few hours or so, but nearly as large as we saw 
> from the SQL worm.  However it doesn't seem to affect other 
> network services, as measured by Matrix.  Just the measured 
> web servers.  The most recent was tonight from 3-5pm and 
> again from 5-7pm EST (http://average.miq.net/)
> 
> Any ideas what is causing them?  Measurement artifact?  Are 
> you seeing something strange on your networks about that time?
> 
> 
>