[11478] in North American Network Operators' Group
Re: [nsp] known networks for broadcast ping attacks
daemon@ATHENA.MIT.EDU (Netstat Webmaster)
Wed Jul 30 16:33:38 1997
Date: Wed, 30 Jul 1997 16:03:04 -0400 (EDT)
From: Netstat Webmaster <feh@netstat.net>
To: "Jay R. Ashworth" <jra@scfn.thpl.lib.fl.us>
cc: "Alex.Bligh" <amb@xara.net>, cisco-nsp@cic.net, nanog@merit.edu
In-Reply-To: <19970730152327.27000@scfn.thpl.lib.fl.us>
On Wed, 30 Jul 1997, Jay R. Ashworth wrote:
> What he's saying is that someone is mounting broadcast ping flooding
> attacks with forged source addresses which make them appear to be
> coming from MAE-East, among other places.
mmmm... no. The forged source address is that of the victim. The listed
broadcast addresses are the destinations of the packets with the forged
address of the victim. The broadcast addresses are never forged.
> Cheers,
> -- jra
Regards,
Tripp
webmaster@http://www.netstat.net
