[149578] in North American Network Operators' Group
RE: UDP port 80 DDoS attack
daemon@ATHENA.MIT.EDU (Drew Weaver)
Wed Feb 8 14:28:11 2012
From: Drew Weaver <drew.weaver@thenap.com>
To: 'Fredrik Holmqvist / I2B' <fredrik@i2b.se>, "nanog@nanog.org"
<nanog@nanog.org>
Date: Wed, 8 Feb 2012 14:27:20 -0500
In-Reply-To: <273be36298d3b47f04ef10bab7c38112@imap>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org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