Re: Re- TCP broadcast storm

Jon Postel <postel@isi.edu> Sun, 07 November 1993 03:40 UTC

Received: from ietf.nri.reston.va.us by IETF.CNRI.Reston.VA.US id aa06135; 6 Nov 93 22:40 EST
Received: from CNRI.RESTON.VA.US by IETF.CNRI.Reston.VA.US id ab06131; 6 Nov 93 22:40 EST
Received: from venera.isi.edu by CNRI.Reston.VA.US id aa22502; 6 Nov 93 22:40 EST
Received: from zephyr.isi.edu by venera.isi.edu (5.65c/5.61+local-14) id <AA17588>; Sat, 6 Nov 1993 19:33:56 -0800
Received: by zephyr.isi.edu (5.65c/5.61+local-13) id <AA09216>; Sat, 6 Nov 1993 19:33:54 -0800
Date: Sat, 06 Nov 1993 19:33:54 -0800
Sender: ietf-archive-request@IETF.CNRI.Reston.VA.US
From: Jon Postel <postel@isi.edu>
Message-Id: <199311070333.AA09216@zephyr.isi.edu>
To: braden@isi.edu
Subject: Re: Re- TCP broadcast storm
Cc: ietf-hosts@isi.edu, TCP-Group@ucsd.edu, MGauthier@iit.nrc.ca


> No way.  A broadcast storm like this could have clogged the local
> Ethernet, but not the Internet as a whole.  Perhaps he was referring to
> the infamous Morris Worm, which was a far more subtle attack (and did
> bring down a signficant part of the Internet).

Bob:

The Morris Worm did not bring down the Internet.  The Internet was very
efficient and effective in delivering the Worm attack to numerous end
hosts, many of which became too busy to do useful work, and were re-attacked
when local efforts were made to clear them.  However, neither the Internet
routers, nor the lines were in anyway attacked or out of service due to the
Morris Worm.

--jon.