To be honest with you, I don't know the answer to that.
My personal experience has been far more text spam than app spam. As you
know, trojans are shipped over port 80 as well. I'm hit here more often than
not. The reinfection mechanisms are usually not smtp but ms exploits on
445/139 etc and are scanned and found using a variety of techniques
including http, icmp, and rpc.
That's a hard, but worthy, question.
-M
---
Martin Hannigan
hannigan(_at_)verisign(_dot_)com
Verisign, Inc.
-----Original Message-----
From: Gadi Evron <ge(_at_)linuxbox(_dot_)org>
To: Hannigan, Martin <hannigan(_at_)verisign(_dot_)com>
CC: asrg(_at_)ietf(_dot_)org <asrg(_at_)ietf(_dot_)org>
Sent: Fri Dec 31 08:29:51 2004
Subject: Re: [Asrg] Spam Ecomomics
Hannigan, Martin wrote:
Sorry - Gadi, possible, but you're doing a good job explaining. I'm only
on
my second cup of 4 coffees this morning.
If a trojan is shipped in a spam, its still classically defined spam.
Nahh, martin, it is probably my cold effecting my mind. :)
What I meant by that is, that ther traffic that worms generate on SMTP
along with spam, would consist of most of the SMTP traffic about. Would
you disagree?
Gadi.
_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg