Security Incidents mailing list archives

Ramen worm scanner and multicast addresses


From: Bill Owens <owens () NYSERNET ORG>
Date: Wed, 17 Jan 2001 16:51:27 -0500

Could someone who's seen the ramen worm in action check to see if it
scans the multicast address range (224.0.0.0 - 239.255.255.255)? I
suspect it may be  causing a rash of Multicast Source Discovery
Protocol (MSDP) storms that started early this week.

Thanks,
Bill.


Current thread: