Steven M. Bellovin. There Be Dragons . We have indeed found such behavior. While looking, though, we noticed a surprising amount of other anomalous behavior, packets that do not appear to indicate an attempted break in, but are worthy of attention nevertheless. We are currently running three types of broad spectrum monitors.
Connections span the globe.
But the very success of the Internet makes some bugs invisible. Because of our monitoring, we are able to spot certain classes of misbehavior that are, in general, not seen. Trying to analyze bogus IP destination addresses on a busy Ethernet cable does not work, for example. But the underlying problems they are symptomatic of have not thereby gone away. Steven M. Bellovin.