Sent: Thursday, November 20, 2003 9:27 PM
Cc: [EMAIL PROTECTED]
Subject: Re: Increase in traffic to/from DSL subs since August?
Steven M. Bellovin writes on 11/20/2003 4:28 PM:
At the IETF Plenary, Bernard Aboba showed a graph of spam, with a
marked uptick since SoBig.F in August. My guess
icmp followed by port 135 connection attempts? nachi or welchia...
flow logs are highly useful in understanding gross behavioral changes in
user usage patterns.
joelja
On Thu, 20 Nov 2003, Jared B. Reimer wrote:
Greetings.
Another independent ISP operator and I have noticed a pretty
On Thursday, November 20, 2003 10:00 PM, Jared B. Reimer
[EMAIL PROTECTED]
wrote:
Greetings.
Another independent ISP operator and I have noticed a pretty significant
increase in traffic to and from our broadband (DSL) subscribers since
August. It's been a fairly steady uptick, at least in
At 04:28 PM 20/11/2003, Steven M. Bellovin wrote:
At the IETF Plenary, Bernard Aboba showed a graph of spam, with a
marked uptick since SoBig.F in August. My guess is worm-deposited spam
relays, though Joel's guess of Nachi or Welchia can't be ruled out,
either, without flow data.
I would say
Jared B. Reimer wrote:
Greetings.
Another independent ISP operator and I have noticed a pretty
significant increase in traffic to and from our broadband (DSL)
subscribers since August. It's been a fairly steady uptick, at least
in my case, resulting in a doubling of overall average traffic
: Another independent ISP operator and I have noticed a pretty significant
: increase in traffic to and from our broadband (DSL) subscribers since
: August. It's been a fairly steady uptick, at least in my case, resulting
: in a doubling of overall average traffic to/from these folks since
Steven M. Bellovin writes on 11/20/2003 4:28 PM:
At the IETF Plenary, Bernard Aboba showed a graph of spam, with a
marked uptick since SoBig.F in August. My guess is worm-deposited spam
relays, though Joel's guess of Nachi or Welchia can't be ruled out,
either, without flow data.
A ballpark
