Worm Bandwidth [was Re: Santa Fe city government computers knocked out by worm]

Rob Thomas robt at cymru.com
Tue Nov 25 14:34:47 UTC 2003

Hi, Sean.

] 	lower bandwidth<---->higher bandwidth

Great ASCII chart.  :)

] Of course, there are some exceptions like a customer with an OC192 uplink
] or an ISP running a web hosting center on a ISDN link.

Another bit to consider is address space.  Code Red discovered
a lot of folks with very small pipes (circa T1) and very large
netblocks (circa /16).  These folks paid a heavy price when
hit with the "scan all IPs in the netblock" worms.

Rob Thomas
ASSERT(coffee != empty);

More information about the NANOG mailing list