Re: Internet vulnerabilities

2002-07-07 Thread Bill Woodcock
On Sun, 7 Jul 2002, Richard A Steenbergen wrote: > I think the problem they are refering to is what happens if your routing > topology changes (or worse, flaps). A stateful connection (like TCP) which > would have stayed up during a routing change could potentially be shifted

Re: stats on spam?

2002-07-07 Thread Sean Donelan
On Sun, 7 Jul 2002, deeann mikula wrote: > can anyone point me to any current statistics on the amount of email > traffic carried on the internet that is actually spam? The Wall Street Journal has an on-going series about UCE/Spam. Today's article is about Hotmail. According to the article Ho

Re: WorldComm Fiber Cut????

2002-07-07 Thread neil d. quiogue
For PSI's network, it should be status.psinet.com. Regards, Neil - Original Message - From: "Sean Donelan" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, July 08, 2002 10:40 AM Subject: Re: WorldComm Fiber Cut > > On Sun, 7 Jul 2002, Gerardo A. Gregory wrote: > > Can s

stats on spam?

2002-07-07 Thread deeann mikula
can anyone point me to any current statistics on the amount of email traffic carried on the internet that is actually spam? everyone kicks around an AOL report to the FTC in 1997 stating that 1/3 of their email messages received were spam, and another by ATT labs (5-15% of their email, 1997) bu

Re: WorldComm Fiber Cut????

2002-07-07 Thread Sean Donelan
On Sun, 7 Jul 2002, Gerardo A. Gregory wrote: > Can someone from WorldComm please verify a fiber cut that happened today at > around 11:30 am (Central). I have bveen informed that a fiber cut in > Illinois (or Indiana) has been in effect (until just a few minutes) for all > of the afternoon and

Re: Internet vulnerabilities

2002-07-07 Thread Richard A Steenbergen
On Sun, Jul 07, 2002 at 08:37:55PM -0400, Stephen Griffin wrote: > > In the referenced message, Rodney Joffe said: > > Just as a guess, Marshall is probably thinking of using anycast for > > something other than DNS, like http, or ftp, or telnet. And he's > > wondering about state ;-) > > If yo

WorldComm Fiber Cut????

2002-07-07 Thread Gerardo A. Gregory
Can someone from WorldComm please verify a fiber cut that happened today at around 11:30 am (Central). I have bveen informed that a fiber cut in Illinois (or Indiana) has been in effect (until just a few minutes) for all of the afternoon and most of the evening. Thanks in Advance Gerardo A. Gr

Re: DOS attack from PANAMSAT

2002-07-07 Thread Stephen Griffin
In the referenced message, Clayton Fiske said: > > On Sun, Jul 07, 2002 at 03:08:14PM -0400, Richard A Steenbergen wrote: > > On Sat, Jul 06, 2002 at 06:24:40PM -0500, Rob Thomas wrote: > > > Hmm, not according to the data I collect. I track numerous botnets and > > > DoSnets, and a bit over 80

Re: wcom overbilling

2002-07-07 Thread Stephen Griffin
In the referenced message, Chris Beggy said: > Wcom's overbilling will be investigated: Perhaps I'm missing something, but this would seem to be less on-topic than the somewhat regular gossip about who's filing for bankruptcy today (which is only marginally on-topic, imho, since the data is gen

Re: Internet vulnerabilities

2002-07-07 Thread Stephen Griffin
In the referenced message, Rodney Joffe said: > Just as a guess, Marshall is probably thinking of using anycast for > something other than DNS, like http, or ftp, or telnet. And he's > wondering about state ;-) If you don't use per-packet type load-sharing, but something like per-flow, or per-sr

Re: European packet loss average increasing

2002-07-07 Thread Stephen J. Wilcox
It was interesting that a number of carriers withdrew prefixes after Ebone was shut down.. I assume this was an effort to reroute traffic off congested links.. Steve On Wed, 3 Jul 2002, Sean Donelan wrote: > > > My non-scientific measurements (i.e. pings to well known european > sites) show

Re: DOS attack from PANAMSAT

2002-07-07 Thread Valdis . Kletnieks
On Sun, 07 Jul 2002 13:27:52 PDT, Clayton Fiske <[EMAIL PROTECTED]> said: > Sure, but the idea that the kids doing the harvesting a) know how to > do such a thing and b) care if the compromised machine is traced is If the perpetrator actually understood the exploit, they'd not be called a 'scri

Re: DOS attack from PANAMSAT

2002-07-07 Thread Clayton Fiske
On Sun, Jul 07, 2002 at 04:16:12PM -0400, [EMAIL PROTECTED] wrote: > On Sun, 07 Jul 2002 12:45:13 PDT, Clayton Fiske <[EMAIL PROTECTED]> said: > > > Don't forget 3) the machine compromised isn't capable of spoofing. > > In Win95/98/ME/NT, there is no raw socket functionality. I don't > > The f

Re: DOS attack from PANAMSAT

2002-07-07 Thread Valdis . Kletnieks
On Sun, 07 Jul 2002 12:45:13 PDT, Clayton Fiske <[EMAIL PROTECTED]> said: > Don't forget 3) the machine compromised isn't capable of spoofing. > In Win95/98/ME/NT, there is no raw socket functionality. I don't The fact that there is no raw socket *API* doesn't mean it's that much more difficult

Re: DOS attack from PANAMSAT

2002-07-07 Thread Clayton Fiske
On Sun, Jul 07, 2002 at 03:08:14PM -0400, Richard A Steenbergen wrote: > On Sat, Jul 06, 2002 at 06:24:40PM -0500, Rob Thomas wrote: > > Hmm, not according to the data I collect. I track numerous botnets and > > DoSnets, and a bit over 80% of them use the real IPs as the source of > > the floods

Re: DOS attack from PANAMSAT

2002-07-07 Thread Richard A Steenbergen
On Sat, Jul 06, 2002 at 06:24:40PM -0500, Rob Thomas wrote: > > Hello, Frank. > > ] Your upstreams, who will help you back-track. Nobody DoS'es with their > ] real IP's anymore. > > Hmm, not according to the data I collect. I track numerous botnets and > DoSnets, and a bit over 80% of them u

Re: DOS attack from PANAMSAT

2002-07-07 Thread Rizzo Frank
Rob Thomas wrote: > ] Your upstreams, who will help you back-track. Nobody DoS'es with their > ] real IP's anymore. > > Hmm, not according to the data I collect. I track numerous botnets and > DoSnets, and a bit over 80% of them us