North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: New worm?

  • From: Christopher L. Morrow
  • Date: Fri Apr 22 01:27:55 2005 
On Fri, 22 Apr 2005, Chris Boyd wrote:

>
>
> On Apr 22, 2005, at 12:13 AM, Christopher L. Morrow wrote:
> > do you atleast have info about the packet
> > types/destinations/anything-useful ?
> >
>
> Netflow is showing a lot of 1500 byte packets, but many different
> destinations.  It looks similar to gnutella traffic.  Maybe just a lot
> files to share and our rate shapers are broken.

probably also it says ports and protocol?