Worm Bandwidth [was Re: Santa Fe city government computers knocked out by worm]

Tue Nov 25 14:34:47 UTC 2003

Hi, Sean.

] 	lower bandwidth<---->higher bandwidth

Great ASCII chart.  :)

] Of course, there are some exceptions like a customer with an OC192 uplink
] or an ISP running a web hosting center on a ISDN link.

Another bit to consider is address space.  Code Red discovered
a lot of folks with very small pipes (circa T1) and very large
netblocks (circa /16).  These folks paid a heavy price when
hit with the "scan all IPs in the netblock" worms.

Thanks,
Rob.
-- 
Rob Thomas
http://www.cymru.com
ASSERT(coffee != empty);