Re: IRC bots and SOPs regarding

2007-05-01 Thread Eric Frazier
Hi, Thank you to everyone who responded. I always avoid asking for help on NANOG because it leads to a flood! However, that is a great thing when you really need something fast :) Eric On 1-May-07, at 9:49 AM, Eric Frazier wrote: Hi, Is there someone who can contact me off list, who

Re: IRC bots...

2005-03-22 Thread Jay R. Ashworth
On Mon, Mar 21, 2005 at 09:31:35AM -0800, Bill Nash wrote: > On Mon, 21 Mar 2005, Alan Sparks wrote: > > Am I the only one who is getting mailbombed by dozens of these duplicate > > messages? > > Could have something to do with folks not trimming conversation > participants from the TO: fields.

Re: IRC bots...

2005-03-21 Thread Bill Nash
On Mon, 21 Mar 2005, Alan Sparks wrote: On Sun, 2005-03-20 at 14:25, Florian Weimer wrote: * Martin Hannigan: Who's got time for all that? Chase the controller, shut down the user until they buy some AV software. That should read "AV software from at least three vendors, with direct Am I the only o

Re: IRC bots...

2005-03-21 Thread Alan Sparks
On Sun, 2005-03-20 at 14:25, Florian Weimer wrote: > * Martin Hannigan: > > > Who's got time for all that? Chase the controller, shut down > > the user until they buy some AV software. > > That should read "AV software from at least three vendors, with direct Am I the only one who is getting ma

Re: IRC bots...

2005-03-20 Thread Florian Weimer
* Martin Hannigan: > Who's got time for all that? Chase the controller, shut down > the user until they buy some AV software. That should read "AV software from at least three vendors, with direct contacts to research staff of at least one of them", or something like that. While it's very likel

Re: IRC bots...

2005-03-13 Thread Bill Nash
On Sat, 12 Mar 2005, John Kristoff wrote: Tallying then just the TCP 6667 traffic, perhaps eliminating very short lived or small flows, should be a good indicator of IRC traffic usage, but tagging those as potential sources for problems may be Yes and no, in my experience. Depending on the drone, s

Re: IRC bots...

2005-03-12 Thread John Kristoff
On Sat, 12 Mar 2005 17:09:17 -0800 (PST) Bill Nash <[EMAIL PROTECTED]> wrote: > As popular as instant messenger, and increasingly, voip toys, have become, > actual IRC usages represents a diminishing percentage of inter-user > chatter. Even something as simple as carving irc usage out of your n

RE: IRC bots...

2005-03-12 Thread Hannigan, Martin
> -Original Message- > From: Bill Nash [mailto:[EMAIL PROTECTED] > Sent: Saturday, March 12, 2005 8:09 PM > To: Hannigan, Martin > Cc: Fergie (Paul Ferguson); nanog@merit.edu > Subject: RE: IRC bots... > > > On Sat, 12 Mar 2005, Hannigan, Martin wrote: >

RE: IRC bots...

2005-03-12 Thread Bill Nash
On Sat, 12 Mar 2005, Hannigan, Martin wrote: [ SNIP ] Who's got time for all that? Chase the controller, shut down the user until they buy some AV software. We've gone beyond "I didn't know" for endusers in most regions. Enterprise IT staff running from whip-cracking security staff, that's who has

RE: IRC bots...

2005-03-12 Thread Fergie (Paul Ferguson)
No duh. This is particulary _why_ I posted. It is an operational problem if I've ver seen one. - ferg -- "Hannigan, Martin" <[EMAIL PROTECTED]> wrote: This problem turned into the spam problem faster than the spam problem did. -M< -- "Fergie", a.k.a. Paul Ferguson Engineering Architectur

RE: IRC bots...

2005-03-12 Thread Hannigan, Martin
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of > Bill Nash > Sent: Saturday, March 12, 2005 4:40 PM > To: Fergie (Paul Ferguson) > Cc: nanog@merit.edu > Subject: Re: IRC bots... > > > > On Sat, 12 Mar 2

Re: IRC bots...

2005-03-12 Thread Bill Nash
On Sat, 12 Mar 2005, Fergie (Paul Ferguson) wrote: Somewhat related to operational issues... It was interesting to read the "daily handler" log at the ISC which related their experiences with detecting (and disabling/disinfecting) a machine/network infected with several IRCbot drone computers. As s