[nsp] Nachi WORM & ICMP floods of ICMP packets ..

[Voll, Scott]

It got so bad on our network that 85% of traffic was ICMP.  We have set
up ACLs to deny ICMP until our customers can clean up there networks.

scott

-----Original Message-----
From: Brian R. Watters [mailto:brwatters at abs-internet.com] 
Sent: Wednesday, September 03, 2003 4:41 PM
To: cisco-nsp at puck.nether.net
Subject: [nsp] Nachi WORM & ICMP floods of ICMP packets ..
Importance: High

Hello All,

What is everyone out there doing for the affects of the Nachi WORM?? ..
We
have many many clients that are infected as well as of course getting
HIT
from the world with these floods of ICMP pings .. Attempting to drop
these
packets via a policy route map kills the CPU on the router (7206VXF
NPE-300
with full Memory) and of course using a ACL to drip ICMP kills our
ability
to PING as well as our many clients who have IT staff OFFNET to look
into
there networks via PING .. It also kills our internal monitors of our
clients .. Anyone have any ideas? .. We can't be the only folks getting
this
.. 


Brian


_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/