[nsp-sec] UDP 7100 Increase?

[Rob Thomas]

Hi, Matt.

> Anyone seeing a UDP-7100 traffic increase?

Oh yeah, big-time on 2008-03-03.  Here are flow counts we've seen for  
the past few days for UDP 7100:

Count    Date UTC/GMT
1640122  2008-03-01
1891149  2008-03-02
2085785  2008-03-03
1328855  2008-03-04

Here are the top ten ASNs, in descending order, for the traffic  
across those four days:

4134    | CN | CHINANET-BACKBONE No.31,Jin-rong Street
4837    | CN | CHINA169-BACKBONE CNCGROUP China169 Backbone
4713    | JP | OCN NTT Communications Corporation
9394    | CN | CRNET CHINA RAILWAY Internet(CRNET)
4847    | CN | CNIX-AP China Networks Inter-Exchange
17897   | CN | CHINATELECOM-HLJ-AS-AP asn for Heilongjiang Provincial  
Net of CT
24138   | CN | CRNET_BJ_IDC-CNNIC-AP China Tietong Telecommunication  
Corporation
9811    | CN | BJGY srit corp.,beijing.
17799   | CN | CHINATELECOM-LN-AS-AP asn for Liaoning Provincial Net  
of CT
23771   | CN | SXBCTV-AP SXBCTV ,Internet Service Provider,

> If so, does anyone know what's causing it?

Not yet, still digging.

Thanks,
Rob.
-- 
Rob Thomas
Team Cymru
http://www.cymru.com/
cmn_err(do_panic, "Out of coffee!");