Re: 1434 traffic

2003-01-25 Thread Scott Weeks
On Sat, 25 Jan 2003, Johannes Ullrich wrote: : : : > What I'm seeing from on my personal network connections is a lot of : > traffic to udp port 1434 start at 05:30:08 UTC. : : I did some graphing of reports we got to DShield/ISC up to 9am EST. : http://isc.sans.org/port1434start.gif : : The pa

Re: 1434 traffic

2003-01-25 Thread Johannes Ullrich
> What I'm seeing from on my personal network connections is a lot of > traffic to udp port 1434 start at 05:30:08 UTC. I did some graphing of reports we got to DShield/ISC up to 9am EST. http://isc.sans.org/port1434start.gif The part that amazes me is the speed. It saturated within 1 minute!

1434 traffic

2003-01-25 Thread Christopher J. Wolff
Gotta love it.. Extended IP access list 172 deny udp any any eq 1434 (21313219 matches) permit ip any any (38402 matches) Regards, Christopher J. Wolff, VP CIO Broadband Laboratories, Inc. http://www.bblabs.com

1434 traffic

2003-01-25 Thread Sean Donelan
What I'm seeing from on my personal network connections is a lot of traffic to udp port 1434 start at 05:30:08 UTC. The sources appear very widespread, but I'm also seeing different affects on networks. Some backbones are being hit extremely hard, while others are just moderately impacted. I h