Probe rates
Source blocking
Content blocking
To contain worms to 1-10% of vulnerable hosts after 24 hours
if reaction system responds in 10 minutes:
Source blocking: 20 - 25 probes/sec
Content blocking: 130 - 180 probes/sec