Re: Using snort to detect if your users are doing interesting things?

2005-06-10 Thread Nils Ketelsen
Drew Weaver wrote: Howdy, I am not sure if this is the proper place, if not I've noticed you guys know what to do so I'll put the fire retardant suit on now. Recently due to growth we have seen an influx of different and interesting types of characters ending up on our network.

Calculating Jitter

2005-06-10 Thread Jeff Murri
I'm hoping here that this post isn't out of line with the scope of the NANOG list, of which I've been a long time lurker. If so, please just ignore me. We're trying to calculate Jitter of a variable (non-limited) size data set. One Jitter formula that we see cited occasionally (and is in

Re: Using snort to detect if your users are doing interesting things?

2005-06-10 Thread Jeroen Massar
On Thu, 2005-06-09 at 23:29 +0300, Kim Onnel wrote: How about project Darknet and sinkholes and monitoring dark ip space, worms and botnets usually scans blindly right and left, so there is a good chance you will get a glimpse on infected hosts if thats what you want, i catch infected hosts by

Re: Calculating Jitter

2005-06-10 Thread Marshall Eubanks
On Fri, 10 Jun 2005 03:53:09 -0600 Jeff Murri [EMAIL PROTECTED] wrote: I'm hoping here that this post isn't out of line with the scope of the NANOG list, of which I've been a long time lurker. If so, please just ignore me. Hello Jeff; These are both moving averages, the question is

Re: Micorsoft's Sender ID Authentication......?

2005-06-10 Thread Valdis . Kletnieks
On Thu, 09 Jun 2005 17:40:55 PDT, Matt Ghali said: So you see, the reputation has nothing to do with your mom, and everything to do with the controlling entity, her ISP. Which makes the whole address-based sender reputation scheme almost workable, if you ignore the scaling issues. That's

Economics of SPAM [Was: Micorsoft's Sender ID Authentication......?]

2005-06-10 Thread Andre Oppermann
[EMAIL PROTECTED] wrote: On Thu, 09 Jun 2005 17:40:55 PDT, Matt Ghali said: So you see, the reputation has nothing to do with your mom, and everything to do with the controlling entity, her ISP. Which makes the whole address-based sender reputation scheme almost workable, if you ignore the

Re: Economics of SPAM [Was: Micorsoft's Sender ID Authentication......?]

2005-06-10 Thread Suresh Ramasubramanian
On 10/06/05, Andre Oppermann [EMAIL PROTECTED] wrote: Everyone in the SPAMwar has to be aware that SPAM can't be stopped until its transaction costs approach that of the cheapest other advertising method. That can be snailmail spam, telephone terror^Wmarketing, whatever, you name it. The

Re: Calculating Jitter

2005-06-10 Thread Fred Baker
you saw marshall's comment. If you're interested in a moving average, he's pretty close. If I understood your question, though, you simply wanted to quantify the jitter in a set of samples. I should think there are two obvious definitions there. A statistician would look, I should think,

Re: Calculating Jitter

2005-06-10 Thread Eric Frazier
At 09:56 AM 6/10/2005, Fred Baker wrote: you saw marshall's comment. If you're interested in a moving average, he's pretty close. If I understood your question, though, you simply wanted to quantify the jitter in a set of samples. I should think there are two obvious definitions there. A

Re: Micorsoft's Sender ID Authentication......?

2005-06-10 Thread Matt Ghali
On Fri, 10 Jun 2005 [EMAIL PROTECTED] wrote: On Thu, 09 Jun 2005 17:40:55 PDT, Matt Ghali said: So you see, the reputation has nothing to do with your mom, and everything to do with the controlling entity, her ISP. Which makes the whole address-based sender reputation scheme

Weekly Routing Table Report

2005-06-10 Thread Routing Table Analysis
This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. Daily listings are sent to [EMAIL PROTECTED] If you have any comments please contact Philip Smith [EMAIL PROTECTED]. Routing Table Report 04:00 +10GMT Sat 11 Jun, 2005

Re: Calculating Jitter

2005-06-10 Thread Marshall Eubanks
On Fri, 10 Jun 2005 10:07:06 -0700 Eric Frazier [EMAIL PROTECTED] wrote: At 09:56 AM 6/10/2005, Fred Baker wrote: you saw marshall's comment. If you're interested in a moving average, he's pretty close. If I understood your question, though, you simply wanted to quantify the jitter

Two computers stolen with Motorola staff data

2005-06-10 Thread Fergie (Paul Ferguson)
Hello, Motorola employees: http://www.reuters.com/newsArticle.jhtml?type=technologyNewsstoryID=8759801 - ferg -- Fergie, a.k.a. Paul Ferguson Engineering Architecture for the Internet [EMAIL PROTECTED] or [EMAIL PROTECTED] ferg's tech blog: http://fergdawg.blogspot.com/