New worm?

Fri Apr 22 05:26:50 UTC 2005

On Fri, 22 Apr 2005, Chris Boyd wrote:

>
>
> On Apr 22, 2005, at 12:13 AM, Christopher L. Morrow wrote:
> > do you atleast have info about the packet
> > types/destinations/anything-useful ?
> >
>
> Netflow is showing a lot of 1500 byte packets, but many different
> destinations.  It looks similar to gnutella traffic.  Maybe just a lot
> files to share and our rate shapers are broken.

probably also it says ports and protocol?