[H-GEN] "Slammer" worm breaks records

[ben.carlyle at invensys.com]

[ Humbug *General* list - semi-serious discussions about Humbug and     ]
[ Unix-related topics. Posts from non-subscribed addresses will vanish. ]

G'day,

I suppose most of us have seen this link by now... but I thought it worth 
posting for those who haven't.

http://www.cs.berkeley.edu/~nweaver/sapphire/

Apparently part of the reason it took hold so agressively[1] was that it 
fit the entire payload into a single UDP packet. Since it didn't have to 
wait for any responses it could issue scans very quickly indeed.

Benjamin.

[1] Apparently 90% of vunerable hosts worldwide were compromised within 
the first 10 minutes of the worm's operation


--
* This is list (humbug) general handled by majordomo at lists.humbug.org.au .
* Postings to this list are only accepted from subscribed addresses of
* lists 'general' or 'general-post'.  See http://www.humbug.org.au/