Level3 routing issues?

Tue Jan 28 13:24:16 UTC 2003

> > Wow, for a minute I thought I was looking at one of our old
> > plots, except for the fact that the x-axis says January 2003
> > and not September 2001 :) :)
> 
> seeing that the etiology and effects of the two events were quite
> different, perhaps eyeglasses which make them look the same are
> not as useful as we might wish?
> 
> randy

If you've been watching, you might agree that the interesting thing is 
not that it looked like that in September 2001,  but that we really
haven't seen a signal that looks like that SINCE September 2001.  

The large differences between the worms are exactly what should make us  
doubly interested in fingering the common mechanism that connects very 
high speed, high diversity wormscan to increased bgp activity.

So far it's been visible as an apparently accidental byproduct of an attack
with other goals.  Are you willing to bet your bifocals that the same 
mechanism can't be weaponized and used against the routing infrastructure 
directly in the future?    

----------
James Cowie
Renesys Corporation
http://gradus.renesys.com