Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I just started reading about this vulnerability and I was curious if it is still a wide spread problem even though it was found 2 years ago. Does anyone know of anywhere that has reliable statistics on how wide spread this problem is currently?

share|improve this question
up vote 4 down vote accepted

According to a recent graph I saw presented at the last IETF meeting from the Austrian registry around 30% of the clients they see still haven't got proper source port and/or query ID randomisation.

The slides are available here.

share|improve this answer
Interesting, please do share it when you find it. – Abe Miessler Aug 11 '10 at 22:30

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.