nanog mailing list archives

Re: New worm?


From: Chris Boyd <cboyd () gizmopartners com>
Date: Fri, 22 Apr 2005 00:22:16 -0500



On Apr 22, 2005, at 12:13 AM, Christopher L. Morrow wrote:
do you atleast have info about the packet
types/destinations/anything-useful ?


Netflow is showing a lot of 1500 byte packets, but many different destinations. It looks similar to gnutella traffic. Maybe just a lot files to share and our rate shapers are broken.


Current thread: