RE: Router/Switches and viruses

From: Wolfpaw - Dale Corse (admin-lists_at_wolfpaw.net)
Date: 05/05/05

  • Next message: Frank Knobbe: "Re: Snort & email"
    To: "'Seek Knowledge'" <aseeker03@yahoo.com>, <focus-ids@securityfocus.com>
    Date: Thu, 5 May 2005 10:25:15 -0600
    
    

    Yeah.. High packet flow could kill it (depends on the switch).
    Rate limit incoming packets per second.

    D.

    > -----Original Message-----
    > From: Seek Knowledge [mailto:aseeker03@yahoo.com]
    > Sent: Tuesday, May 03, 2005 3:41 PM
    > To: focus-ids@securityfocus.com
    > Subject: Router/Switches and viruses
    >
    >
    > Does anyone have any first-hand experience with a
    > single infected desktop machine (or windows server for
    > that matter) taking out a LAN switch? Would anyone
    > have any stories from the trenches of an infected
    > machine causing a directly connected router to stop functioning?
    >
    > If so, what could be done to prevent such an outage?
    > What IDS/IPS strategy might one implement to prevent
    > and or at least detect such an event?
    >
    > Thanks in advance.
    > ASeeker
    >
    > ______________________________________________________________
    > __________
    > Yahoo! Messenger - Communicate instantly..."Ping"
    > your friends today! Download Messenger Now
    > http://uk.messenger.yahoo.com/download/index.html
    >
    > --------------------------------------------------------------
    > ------------
    > Test Your IDS
    >
    > Is your IDS deployed correctly?
    > Find out quickly and easily by testing it with real-world
    > attacks from
    > CORE IMPACT.
    > Go to
    > http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
    > to learn more.
    > --------------------------------------------------------------
    > ------------
    >
    >

    --------------------------------------------------------------------------
    Test Your IDS

    Is your IDS deployed correctly?
    Find out quickly and easily by testing it with real-world attacks from
    CORE IMPACT.
    Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
    to learn more.
    --------------------------------------------------------------------------


  • Next message: Frank Knobbe: "Re: Snort & email"

    Relevant Pages

    • RE: Router/Switches and viruses
      ... Slammer take out a switch. ... monitor network traffic levels and have a good baseline of what ... Why allow computers to talk to port ... > Find out quickly and easily by testing it with real-world attacks from ...
      (Focus-IDS)
    • RE: hubs and switches
      ... you can be 99% sure you've got a true "dumb" hub. ... getting a cheap switch. ... Find out quickly and easily by testing it with real-world attacks from CORE ...
      (Focus-IDS)