Re: Warning -- floods of Allaple worm alerts.... sid:200329(2-5)

Matt Jonkman wrote:
> You still seeing those numbers of hits Russel?
>   

No, they stopped abruptly a few hours ago.
> Have you tried pinging some of the sources at random to see if they're
> legit or spoofed?
>   

At leasts some of the addresses have real machines behind them.

I think the idea of a time threshold is a good one... 


Russell