I haven't seen the IDS trips; however there has been an anomalous pattern of traffic on our border routers since 1400 MST.
Please let me and the group know what you're seeing.
The pattern looks like the usual Nimda/CodeRedI/CodeRedII stuff. The
frequency of scans is upticking though. Whether its planned or is a social
effect of possibly more machines on due to news, therefore more hosts for
the scanners, is unknown. Just keeping an eye on things.
Eric
I am aware of several school districts that have shut down due to NIMDA
outbreaks. I only mention it, because that is a significant number of
hosts. They shutdown yesterday....maybe NIMDA is making a return.
jas