SoBig volume way down

Wed Sep 10 18:03:03 UTC 2003

the volume of SoBig virii hitting our mail server had gotten so big that I
had to have a cron job delete the quarantine every hour.  We were
averaging about 400 of them per hour until around midnight last night,
where the volume went to and remains about 1/10th of that.  Did this thing
expire (in which case, roughly 10% of all infected machines have
misconfigured clocks, assuming the exp date was in UDT), or did something
else happen?  Just curious...

James Smallacombe		      PlantageNet, Inc. CEO and Janitor
up at 3.am							    http://3.am
=========================================================================