Katrina Network Damage Report

Mon Sep 12 03:28:55 UTC 2005

Suresh,

It seems to me that you're assuming that your access network will be
multi-gigabit in order to support millions of hosts trying to scan each of
your subnets simultaneously in order to finish in time before celebrating a
couple of centuries before now ?

Regards,
Jordi

> De: Suresh Ramasubramanian <ops.lists at gmail.com>
> Responder a: <ops.lists at gmail.com>
> Fecha: Mon, 12 Sep 2005 07:32:36 +0530
> Para: Joel Jaeggli <joelja at darkwing.uoregon.edu>
> CC: Alan Spicer <a_spicer at bellsouth.net>, Steve Gibbard <scg at gibbard.org>,
> <nanog at nanog.org>
> Asunto: Re: Katrina Network Damage Report
> 
> 
> On 12/09/05, Joel Jaeggli <joelja at darkwing.uoregon.edu> wrote:
>> Drop me a line when your botnet finishes scanning 3FFE:0000::/16 and moves
>> on to 2001:xxxx::
> 
> It is a v6 botnet - so a correspondingly larger number of infected
> hosts, and larger botnet size
> If it is your argument that scanning just won't scale on a botnet,
> anything can be made to scale if you throw sufficient resources that
> aren't your own - botted toasters, like i said - at it
> 
> -- 
> Suresh Ramasubramanian (ops.lists at gmail.com)