[Dshield] Port 23 activity spike

Johannes B. Ullrich jullrich at sans.org
Wed Jan 7 14:36:20 GMT 2004


I will try to add some of this to the web based reports.
The issue is that some of these queries are slow right now,
so they need some tuning. The "top ten attackers" for a
particular day/targetport takes 10 seconds, which is a bit
long for a web based query. We do some caching, but if
google tries to index every port, things may get ugly ;-)



-- 
CTO SANS Internet Storm Center               http://isc.sans.org
phone: (617) 837 2807                          jullrich at sans.org 

contact details: http://johannes.homepc.org/contact.htm
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://www.dshield.org/pipermail/list/attachments/20040107/abe45a98/attachment.bin


More information about the list mailing list