On Apr 21, 2005, at 11:24 PM, Charles Cala wrote:
i've seen file sharing/p2p/spam bots set up like that.
removed a few, the hard way.
(un mounted the drives, set them up on another box, and cleaned them)
what does the virus scan turn up?
Don't know yet, as the support staff gone for the day at this time. --Chris
On Thu, 21 Apr 2005, Chris Boyd wrote:
On Apr 21, 2005, at 11:24 PM, Charles Cala wrote:
i've seen file sharing/p2p/spam bots set up like that.
removed a few, the hard way.
(un mounted the drives, set them up on another box, and cleaned them)
what does the virus scan turn up?
Don't know yet, as the support staff gone for the day at this time.
do you atleast have info about the packet types/destinations/anything-useful ?
On Apr 22, 2005, at 12:13 AM, Christopher L. Morrow wrote:
do you atleast have info about the packet types/destinations/anything-useful ?
Netflow is showing a lot of 1500 byte packets, but many different destinations. It looks similar to gnutella traffic. Maybe just a lot files to share and our rate shapers are broken.
On Fri, 22 Apr 2005, Chris Boyd wrote:
On Apr 22, 2005, at 12:13 AM, Christopher L. Morrow wrote:
do you atleast have info about the packet types/destinations/anything-useful ?
Netflow is showing a lot of 1500 byte packets, but many different destinations. It looks similar to gnutella traffic. Maybe just a lot files to share and our rate shapers are broken.
probably also it says ports and protocol?
On Apr 22, 2005, at 12:13 AM, Christopher L. Morrow wrote:
do you atleast have info about the packet types/destinations/anything-useful ?
Netflow is showing a lot of 1500 byte packets, but many different destinations. It looks similar to gnutella traffic. Maybe just a lot files to share and our rate shapers are broken.
New filesharing protocol? Adi
participants (3)
-
Adi Linden
-
Chris Boyd
-
Christopher L. Morrow