[157307] in North American Network Operators' Group
Re: Attacking on Source Port 0 (ZERO)
daemon@ATHENA.MIT.EDU (Scott Weeks)
Sun Oct 14 22:12:26 2012
Date: Sun, 14 Oct 2012 19:10:08 -0700
From: "Scott Weeks" <surfer@mauigateway.com>
To: <nanog@nanog.org>
Reply-To: surfer@mauigateway.com
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
--- sh.vahabzadeh@gmail.com wrote:
From: Shahab Vahabzadeh <sh.vahabzadeh@gmail.com>
It was TCP and I think it was not a DDoS attack because the traffic was not
heavy.
-------------------------------
Many/most DoS attacks do not push up the traffic levels considerably.
You can see this when looking at packet per second (pps) rates. You
may see high pps on the attacked machines, but no correlating large
increase in bps traffic rates.
scott
