SQL Slammer takes advantage of the way MS SQL servers handle input on port 1434 of the SQL Server Resolution Service. Only 376 bytes in a specially designed packet delivered over the Internet can remotely compromise a susceptible server. The SQL worm, like Code Red, has no files and simply exists in memory.