3 ms·
They were likely doing full packet capture and in my experience it's not as rare or difficult are you might think. At my place of employment we're doing it on
by tacoman 13y ago
They were likely doing full packet capture and in my experience it's not as rare or difficult are you might think. At my place of employment we're doing it on much more mundane and less sensitive services with up to 4 weeks of buffer in some places.
Even at a previous job back in the late 90's we were doing full pcap of our gov't department's T1 to the internet.
Products from companies like Netscout and VSS make this pretty straightforward.
- personZ 13y agoThe rareness assumption comes about given that the general response to the exploit is a complete blindness to the possibility that it was exploited before it gained public awareness: There seems to be a complete lack of ability by almost all players to "go back in time" and detect exploits. I imagine a government agency, particularly dealing with revenue, might be a primary user of such a tool, though.