[Gllug] Analysing worm traffic

[Grzegorz Jaskiewicz]

On Mon, 29 Sep 2003, Doug Winter wrote:

>     9125 * 116 = 1058500 bytes in 24 hours
>                = 0.096 Kbps
> 
> If you don't respond with port unreachables (because you are filtering
> and have chosen not to) then it will only be 52 bytes per attempt.

Again it is average, but we are talking about peaks here. To quote 
"sometimes is getting ... slow". ;]
Simple math is not always an answer.

--
GJ


-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug