When the slammer worm was going around, InterMapper pointed out an infected customer. We were monitoring his router and T-1 circuit and it was very obvious when he got hit because his link utilization suddenly pegged, which was of course, reflected on the utilization map.
We use charts to look for unusual bandwidth traffic patterns, which usually indicate a compromised host. Patrick Storr Systems Administration Northwest Internet Services 844 Wood Street Havelock, IA 50546 712-776-2222 > ---------- > From: Richard E. Brown > Reply To: InterMapper Discussion > Sent: Thursday, August 28, 2003 10:04 AM > To: [EMAIL PROTECTED] > Subject: InterMapper vs. SoBig, Welchia, Lovsan, et. al. > > Folks: > > A couple customers have reported that InterMapper was useful in detecting or > responding to this most recent round of virus/work attacks. > > Do you have a story that shows how InterMapper helped you? We're looking to pull > together an application note or white paper that gives some hints for new ways > to use InterMapper. Thanks! > > Rich Brown [EMAIL PROTECTED] > Dartware, LLC http://www.dartware.com > 10 Buck Road, PO Box 130 Telephone: 603-643-2268 > Hanover, NH 03755-0130 USA Fax: 603-643-2289 > > ____________________________________________________________________ > List archives: > http://www.mail-archive.com/intermapper-talk%40list.dartware.com/ > To unsubscribe: send email to: [EMAIL PROTECTED] > > ____________________________________________________________________ List archives: http://www.mail-archive.com/intermapper-talk%40list.dartware.com/ To unsubscribe: send email to: [EMAIL PROTECTED]
