Return-Path: <sentto-279987-2113-1000996534-fc=all.net@returns.onelist.com> Delivered-To: fc@all.net Received: from 204.181.12.215 by localhost with POP3 (fetchmail-5.1.0) for fc@localhost (single-drop); Thu, 20 Sep 2001 07:37:08 -0700 (PDT) Received: (qmail 15205 invoked by uid 510); 20 Sep 2001 14:35:58 -0000 Received: from n19.groups.yahoo.com (216.115.96.69) by 204.181.12.215 with SMTP; 20 Sep 2001 14:35:58 -0000 X-eGroups-Return: sentto-279987-2113-1000996534-fc=all.net@returns.onelist.com Received: from [10.1.1.222] by mw.egroups.com with NNFMP; 20 Sep 2001 14:35:35 -0000 X-Sender: fc@big.all.net X-Apparently-To: iwar@onelist.com Received: (EGP: mail-7_3_2_2); 20 Sep 2001 14:35:34 -0000 Received: (qmail 47475 invoked from network); 20 Sep 2001 14:35:33 -0000 Received: from unknown (10.1.10.142) by 10.1.1.222 with QMQP; 20 Sep 2001 14:35:33 -0000 Received: from unknown (HELO big.all.net) (65.0.156.78) by mta3 with SMTP; 20 Sep 2001 14:35:34 -0000 Received: (from fc@localhost) by big.all.net (8.9.3/8.7.3) id HAA23461 for iwar@onelist.com; Thu, 20 Sep 2001 07:35:34 -0700 Message-Id: <200109201435.HAA23461@big.all.net> To: iwar@onelist.com (Information Warfare Mailing List) Organization: I'm not allowed to say X-Mailer: don't even ask X-Mailer: ELM [version 2.5 PL1] From: Fred Cohen <fc@all.net> Mailing-List: list iwar@yahoogroups.com; contact iwar-owner@yahoogroups.com Delivered-To: mailing list iwar@yahoogroups.com Precedence: bulk List-Unsubscribe: <mailto:iwar-unsubscribe@yahoogroups.com> Date: Thu, 20 Sep 2001 07:35:34 -0700 (PDT) Reply-To: iwar@yahoogroups.com Subject: [iwar] Curreant virus rates are about... Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit The NAMDA virus is currently making web requests at a rate of about 1 request per 20 seconds per IP address. To get a sense of this: - The last virus (Code Red version whatever) was making an average of about 400 requests per day per IP address, about 1/9 the rate of the new virus. - If you have a class C network (250 usable IP addresses or so), you will be handling an average of 900,000 virus requests per day. - Many companies have a class B address space, 256 times that size, which means about 250 million requests per day or 10 million per hour. - The average size of an audit record of a request is about 150 bytes, so the audit trails from this virus will run about 40 Gigabytes per day for such a network. FC --This communication is confidential to the parties it is intended to serve-- Fred Cohen Fred Cohen & Associates.........tel/fax:925-454-0171 fc@all.net The University of New Haven.....http://www.unhca.com/ http://all.net/ Sandia National Laboratories....tel:925-294-2087 ------------------ http://all.net/ Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/
This archive was generated by hypermail 2.1.2 : 2001-09-29 21:08:46 PDT