On Sat, 25 Jan 2003, Arien Vijn wrote:
It seems to be no DoS attack.
No DoS attack?
It seems to be a worm with the effect of a DoS attack. So DoS is the result, but it's not really an attack. The huge bandwith consumtion with small packets cause problems at the source rather than at the destination. More or less like code red, but far worse and without a fixed destination address. There is a thread about this starting at NANOG, see http://www.merit.edu/mail.archives/nanog/threads.html#06618 -- __________________ Met vriendelijke groet, /\ ___/ Alex Bik /- \ _/ Business Internet Trends BV AB2298-RIPE /--- \/ __________________
On 25-01-2003 11:21AM, "Alex Bik" <alex at bit.nl> wrote:
On Sat, 25 Jan 2003, Arien Vijn wrote:
It seems to be no DoS attack.
No DoS attack?
It seems to be a worm with the effect of a DoS attack. So DoS is the result, but it's not really an attack. The huge bandwith consumtion with small packets cause problems at the source rather than at the destination. More or less like code red, but far worse and without a fixed destination address.
I see, thanks for the explanation :-)
There is a thread about this starting at NANOG, see
Yeah I saw those once the phone started to ring this morning. Arien -- Arien Vijn tel: +31 205 141 718 Amsterdam Internet Exchange mobile: +31 651 836 444 http://www.ams-ix.net e-mail: arien.vijn at ams-ix.net
On Sat, Jan 25, 2003 at 11:21:14AM +0100 Alex Bik(alex at bit.nl) wrote:
On Sat, 25 Jan 2003, Arien Vijn wrote:
It seems to be no DoS attack.
No DoS attack?
It seems to be a worm with the effect of a DoS attack. So DoS is the result, but it's not really an attack. The huge bandwith consumtion with small packets cause problems at the source rather than at the destination. More or less like code red, but far worse and without a fixed destination address.
It's a full blown microsoft powered dos. I just spoke to Joris de Mooij from Tiscali, blocking ports 1433 and 1434 on both udp and tcp seems to be the remedy. It's a worm based on multiple buffer overruns in the ms sql server. more info on: - http://www.intelenet.net/news/mssql-udp.txt (from nanog) - http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/... For those having trouble, good luck! Tycho -- Tycho Eggen (Unix|Network|Social) Engineer tycho at e-dude.org +31 6 41 824 855 "Don't worry over what other people are thinking about you." "They're too busy worrying over what you are thinking about them."
Hi! Markus, een van onze webdesigners heeft een logo gefabriekt voor NLNOG, er staan twee versies op de NLNOG site, een gerenderde en een 'gewone'. http://mailman.nlnog.net/logos/nlnog_photoshopped.jpg http://mailman.nlnog.net/logos/ komen nog wat andere varianten, staat nu een .ps ook al. Comments/suggestions welcome. Koste meer tijd als die van Arien, welgeteld 7 minuten =) Maar das inclusief het renderen :) Bye, Raymond.
participants (4)
-
alex＠bit.nl -
arien.vijn＠ams-ix.net -
raymond＠prolocation.net -
tycho＠e-dude.org