|
This has been hitting my work really hard. It's a real pain in the ass because even if your machines are all patched all the infected machines from out side your network spike you traffic.
Here's an example of what I'm talking about:
>Mike Hogsett <hogsett@csl.sri.com
>Tue, 19 Aug 2003 14:07:14 -0700
>The following are the file sizes for our compressed daily firewall logs.
>There are a few interesting dates. The spike for 26 Jan 2003 is the SQL
>Slammer worm. The increase in early March is an exploit for port 445 on MS
>products. Finally the major spike on Aug 12 is Blaster.
>So, we have gone from about 2Mbytes/day of compressed log data at the
>beginning of the year to about 20Mbytes/day now. There is no end in >sight.
1-Jan-2003 2M **
2-Jan-2003 2M **
3-Jan-2003 2M **
4-Jan-2003 3M ***
5-Jan-2003 1M *
6-Jan-2003 2M **
7-Jan-2003 2M **
8-Jan-2003 3M ***
9-Jan-2003 3M ***
10-Jan-2003 3M ***
11-Jan-2003 3M ***
12-Jan-2003 3M ***
13-Jan-2003 3M ***
14-Jan-2003 3M ***
15-Jan-2003 3M ***
16-Jan-2003 3M ***
17-Jan-2003 2M **
18-Jan-2003 3M ***
19-Jan-2003 3M ***
20-Jan-2003 3M ***
21-Jan-2003 2M **
22-Jan-2003 2M **
23-Jan-2003 3M ***
24-Jan-2003 3M ***
25-Jan-2003 9M *********
26-Jan-2003 24M ************************
27-Jan-2003 8M ********
28-Jan-2003 5M *****
29-Jan-2003 4M ****
30-Jan-2003 3M ***
31-Jan-2003 2M **
1-Feb-2003 3M ***
2-Feb-2003 3M ***
3-Feb-2003 2M **
4-Feb-2003 3M ***
5-Feb-2003 2M **
6-Feb-2003 3M ***
7-Feb-2003 3M ***
8-Feb-2003 4M ****
9-Feb-2003 3M ***
10-Feb-2003 4M ****
11-Feb-2003 3M ***
12-Feb-2003 3M ***
13-Feb-2003 3M ***
14-Feb-2003 3M ***
15-Feb-2003 3M ***
16-Feb-2003 3M ***
17-Feb-2003 3M ***
18-Feb-2003 3M ***
19-Feb-2003 3M ***
20-Feb-2003 3M ***
21-Feb-2003 2M **
22-Feb-2003 3M ***
23-Feb-2003 3M ***
24-Feb-2003 3M ***
25-Feb-2003 3M ***
26-Feb-2003 4M ****
27-Feb-2003 3M ***
28-Feb-2003 3M ***
1-Mar-2003 3M ***
2-Mar-2003 2M **
3-Mar-2003 3M ***
4-Mar-2003 4M ****
5-Mar-2003 4M ****
6-Mar-2003 4M ****
7-Mar-2003 5M *****
8-Mar-2003 6M ******
9-Mar-2003 11M ***********
10-Mar-2003 12M ************
11-Mar-2003 11M ***********
12-Mar-2003 10M **********
13-Mar-2003 11M ***********
14-Mar-2003 12M ************
15-Mar-2003 10M **********
16-Mar-2003 10M **********
17-Mar-2003 9M *********
18-Mar-2003 9M *********
19-Mar-2003 10M **********
20-Mar-2003 11M ***********
21-Mar-2003 12M ************
22-Mar-2003 10M **********
23-Mar-2003 11M ***********
24-Mar-2003 6M ******
25-Mar-2003 10M **********
26-Mar-2003 10M **********
27-Mar-2003 10M **********
28-Mar-2003 12M ************
29-Mar-2003 11M ***********
30-Mar-2003 10M **********
31-Mar-2003 9M *********
1-Apr-2003 12M ************
2-Apr-2003 13M *************
3-Apr-2003 11M ***********
4-Apr-2003 10M **********
5-Apr-2003 10M **********
6-Apr-2003 13M *************
7-Apr-2003 9M *********
8-Apr-2003 11M ***********
9-Apr-2003 11M ***********
10-Apr-2003 11M ***********
11-Apr-2003 11M ***********
12-Apr-2003 12M ************
13-Apr-2003 12M ************
14-Apr-2003 11M ***********
15-Apr-2003 12M ************
16-Apr-2003 12M ************
17-Apr-2003 10M **********
18-Apr-2003 11M ***********
19-Apr-2003 11M ***********
20-Apr-2003 10M **********
21-Apr-2003 10M **********
22-Apr-2003 11M ***********
23-Apr-2003 13M *************
24-Apr-2003 13M *************
25-Apr-2003 13M *************
26-Apr-2003 12M ************
27-Apr-2003 10M **********
28-Apr-2003 11M ***********
29-Apr-2003 15M ***************
30-Apr-2003 11M ***********
1-May-2003 11M ***********
2-May-2003 10M **********
3-May-2003 11M ***********
4-May-2003 10M **********
5-May-2003 9M *********
6-May-2003 12M ************
7-May-2003 11M ***********
8-May-2003 10M **********
9-May-2003 9M *********
10-May-2003 10M **********
11-May-2003 9M *********
12-May-2003 9M *********
13-May-2003 13M *************
14-May-2003 10M **********
15-May-2003 10M **********
16-May-2003 10M **********
17-May-2003 11M ***********
18-May-2003 9M *********
19-May-2003 10M **********
20-May-2003 10M **********
21-May-2003 11M ***********
22-May-2003 9M *********
23-May-2003 10M **********
24-May-2003 12M ************
25-May-2003 10M **********
26-May-2003 11M ***********
27-May-2003 10M **********
28-May-2003 13M *************
29-May-2003 10M **********
30-May-2003 11M ***********
31-May-2003 10M **********
1-Jun-2003 7M *******
2-Jun-2003 8M ********
3-Jun-2003 11M ***********
4-Jun-2003 10M **********
5-Jun-2003 11M ***********
6-Jun-2003 10M **********
7-Jun-2003 12M ************
8-Jun-2003 12M ************
9-Jun-2003 12M ************
10-Jun-2003 14M **************
11-Jun-2003 12M ************
12-Jun-2003 13M *************
13-Jun-2003 10M **********
14-Jun-2003 11M ***********
15-Jun-2003 9M *********
16-Jun-2003 10M **********
17-Jun-2003 14M **************
18-Jun-2003 13M *************
19-Jun-2003 13M *************
20-Jun-2003 11M ***********
21-Jun-2003 11M ***********
22-Jun-2003 9M *********
23-Jun-2003 9M *********
24-Jun-2003 11M ***********
25-Jun-2003 12M ************
26-Jun-2003 10M **********
27-Jun-2003 12M ************
28-Jun-2003 14M **************
29-Jun-2003 11M ***********
30-Jun-2003 10M **********
1-Jul-2003 14M **************
2-Jul-2003 9M *********
3-Jul-2003 10M **********
4-Jul-2003 11M ***********
5-Jul-2003 11M ***********
6-Jul-2003 8M ********
7-Jul-2003 9M *********
8-Jul-2003 14M **************
9-Jul-2003 10M **********
10-Jul-2003 8M ********
11-Jul-2003 9M *********
12-Jul-2003 10M **********
13-Jul-2003 7M *******
14-Jul-2003 8M ********
15-Jul-2003 12M ************
16-Jul-2003 10M **********
17-Jul-2003 9M *********
18-Jul-2003 10M **********
19-Jul-2003 8M ********
20-Jul-2003 9M *********
21-Jul-2003 8M ********
22-Jul-2003 11M ***********
23-Jul-2003 9M *********
24-Jul-2003 8M ********
25-Jul-2003 9M *********
26-Jul-2003 8M ********
27-Jul-2003 8M ********
28-Jul-2003 7M *******
29-Jul-2003 12M ************
30-Jul-2003 9M *********
31-Jul-2003 9M *********
1-Aug-2003 9M *********
2-Aug-2003 8M ********
3-Aug-2003 7M *******
4-Aug-2003 7M *******
5-Aug-2003 11M ***********
6-Aug-2003 8M ********
7-Aug-2003 7M *******
8-Aug-2003 8M ********
9-Aug-2003 6M ******
10-Aug-2003 7M *******
11-Aug-2003 7M *******
12-Aug-2003 44M ********************************************
13-Aug-2003 35M ***********************************
14-Aug-2003 24M ************************
15-Aug-2003 20M ********************
16-Aug-2003 15M ***************
17-Aug-2003 11M ***********
18-Aug-2003 12M ************
19-Aug-2003 26M **************************
__________________
Subvert the Dominant Paradigm
|