RE: Worm Mitigation on Router Question

From: Lab Rat #109385382 (techlist01@gmail.com)
Date: Thu Nov 09 2006 - 18:47:09 ART

• Next message: Venkatesh Venkatesh: "Re: Cat6500 vs. 7600 Router"
• Previous message: JB: "Re: Matching traffic for MQC"
• Maybe in reply to: Lab Rat #109385382: "Worm Mitigation on Router Question"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Even for the security lab? Thanks.

-----Original Message-----
From: David Mitchell [mailto:david.mitchell@centientnetworks.com]
Sent: Thursday, November 09, 2006 12:24 PM
To: Lab Rat #109385382; Cisco certification
Subject: RE: Worm Mitigation on Router Question

I don't think they require you to memorize the structure of every type of
worm. Just be familiar with the types of things you can match on with NBAR.

Thanks,
 
David Mitchell
CCIE #17178, CCSP, MCSE

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of Lab
Rat #109385382
Sent: Thursday, November 09, 2006 3:08 AM
To: 'Cisco certification'; 'Cisco certification'
Subject: Worm Mitigation on Router Question

Does anyone know if the Doc CD explains how to match (NBAR) on various worm
components? For example, are the URL strings for the Nimda worm listed
anywhere?

Please don't tell me I have to memorize all of these.

Thanks,

Ed

• Next message: Venkatesh Venkatesh: "Re: Cat6500 vs. 7600 Router"
• Previous message: JB: "Re: Matching traffic for MQC"
• Maybe in reply to: Lab Rat #109385382: "Worm Mitigation on Router Question"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Fri Dec 01 2006 - 08:05:45 ART