Re: Code Red math

At 4:39 PM -0700 8/3/01, Karl J. Runge wrote: >Does anyone know how the worm is generating the IP's it tries? Cert has some some notes on the probability of Code Red II creating different IPs. Ray -- -

Re: Code Red math

On Sat, 4 Aug 2001, Karl J. Runge wrote: > Anyway, just when I thought my analysis method was well established > (maybe I could measure how the number of infected systems decreases > with time...) I got deluged with 300 additional port 80 hits this > afternoon!!! > > It seems to be a variant (sam

Re: Code Red math

On Fri, 3 Aug 2001, "James R. Van Zandt" <[EMAIL PROTECTED]> wrote: > ... > I read that the original worm used a fixed seed to generate its > "random" addresses, but that later varients used a random seed. Ah, that would explain what I am seeing better. Thanks! Anyway, just when I thought my ana