Cisco, Qwest, Cert, NIPC (was Re: Code Red -> Router Memory depletion? )

Marshall Eubanks tme at 21rst-century.com
Fri Jul 20 05:01:46 UTC 2001


>
>The Code Red traffic is starting to have a measureable impact on
>global Internet traffic.  The Internet Health Report (Keynote)
>and the Internet Weather Report (Matrix) are showing packet loss
>increasing and reachability decreasing throughout the afternoon.
>Latency didn't start increasing until this evening.
>
>Keynote is showing problems in QWEST's network, and Slashdot
>is reporting that QWEST has widely deployed a version of the
>Cisco 67x DSL router which is vulnerable to a HTTP data
>corruption error caused byt the worm.
>
>http://www.cisco.com/warp/public/707/CBOS-multiple.shtml
>
>CERT/CC and the National Information Protection Center issued
>advisories today.  I don't know at what time, since it hasn't
>appeared in my e-mail yet.  But it is available on the NIPC 
>and CERT/CC web sites.
>
>http://www.nipc.gov/
>http://www.cert.org/
>
>

Sean;

Is there any evidence that the worm attacks are quasi 
periodic ? I saw
waves of packet loss on vBNS to Columbia U. this afternoon in multicast, with
bad loss roughly every one minute out of 5 or so. 
This happened much of the afternoon, and is pretty unusual.

                             Regards 
                             Marshall Eubanks



More information about the NANOG mailing list