[nsp-sec] BGP issues around the net?

[Smith, Donald]

Agreed it is not large.
It is probably not affecting anything.
It is even possible as someone else suggested that it is not malicious.
I believe it is malicious but not very effective:)
There were a few other ports also communicating with 179 including tcp
80 to tcp 179.
Again I suspect those are minor reflective attacks but there are other
explainations.


RM=for(1)
{manage_risk(identify_risk(product[i++]))}
Donald.Smith at qwest.com giac 

> -----Original Message-----
> From: Rob Thomas [mailto:robt at cymru.com] 
> Sent: Saturday, January 26, 2008 12:27 PM
> To: Smith, Donald
> Cc: nsp-security NSP
> Subject: Re: [nsp-sec] BGP issues around the net?
> 
> Hi, team.
> 
> We're not seeing a lot of the UDP 123 <-> UDP 179 traffic.  Here are  
> the counts for the past few days.
> 
> 20080120 583
> 20080121 657
> 20080122 620
> 20080123 457
> 20080124 637
> 20080125 367
> 20080126 294
> 
> Thanks,
> Rob.
> -- 
> Rob Thomas
> Team Cymru
> http://www.cymru.com/
> ASSERT(coffee != empty);
> 
> 
> 
> 
> 


This communication is the property of Qwest and may contain confidential or
privileged information. Unauthorized use of this communication is strictly 
prohibited and may be unlawful.  If you have received this communication 
in error, please immediately notify the sender by reply e-mail and destroy 
all copies of the communication and any attachments.