I've been chatting to a buddy over ICQ today; he works as a principal sysadmin for a medium-sized ISP here in St.Petersburg (around 3k users). At some point of our conversation, I was completely shocked he is not aware of the recent MS SQL worm, and was wondering why is he getting a UDP packet flood on a local accounting Intranet. Can you believe this? A person directly responsible for the network and system operation in his organization is not aware about a worm that saturated half of the Internet for a few hours a week ago. Is he living in a can? Or spends too much time in q3a?.. Who knows. One thing for sure, I wouldn't want to be a customer at that ISP.