IDS: RE: Router/Switches and viruses

["Wolfpaw - Dale Corse" <admin-lists () wolfpaw net>]

Yeah.. High packet flow could kill it (depends on the switch).
Rate limit incoming packets per second.

D.

> -----Original Message-----
> From: Seek Knowledge [mailto:aseeker03 () yahoo com] 
> Sent: Tuesday, May 03, 2005 3:41 PM
> To: focus-ids () securityfocus com
> Subject: Router/Switches and viruses
>
>
> Does anyone have any first-hand experience with a
> single infected desktop machine (or windows server for
> that matter) taking out a LAN switch? Would anyone
> have any stories from the trenches of an infected
> machine causing a directly connected router to stop functioning?
>
> If so, what could be done to prevent such an outage?
> What IDS/IPS strategy might one implement to prevent
> and or at least detect such an event?
>
> Thanks in advance.
> ASeeker
>
> ______________________________________________________________
> __________
> Yahoo! Messenger - Communicate instantly..."Ping" 
> your friends today! Download Messenger Now 
> http://uk.messenger.yahoo.com/download/index.html
>
> --------------------------------------------------------------
> ------------
> Test Your IDS
>
> Is your IDS deployed correctly?
> Find out quickly and easily by testing it with real-world 
> attacks from 
> CORE IMPACT.
> Go to 
> http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
> to learn more.
> --------------------------------------------------------------
> ------------


--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from 
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
--------------------------------------------------------------------------