Results 6 months of monitoring and measurement 3 months from September 2001 - December 2001 1/100000 synackd sampling: 1 host, 1 hit over 66,000 reassembled connections 5 distinct worms: CodeRed, CodeRedII + variant, Nimda + variant 3 months from December 2001 - April 2002 increased to 1/1000 synackd sampling: 1 host, 5 hits over 7 million reassembled connections 2 distinct worms: CodeRed, Nimda 1-month outage in January, 4-day outage in April