[15794] in North American Network Operators' Group
Re: What do we do with clueless ISPs
daemon@ATHENA.MIT.EDU (Fancy Feast)
Sat Mar 21 15:02:35 1998
Date: Sat, 21 Mar 1998 14:46:29 -0500 (EST)
From: Fancy Feast <alex@sprint.net>
To: Hank Nussbacher <hank@ibm.net.il>
cc: nanog@merit.edu
In-Reply-To: <2.2.32.19980321190002.006c63b8@max.ibm.net.il>
What he means is that you should probably include Smurfette as a sample.
Alex
Sprintlink Network Operations
(ebo ebpxryy qvq vg. v'z frevbhf!)
On Sat, 21 Mar 1998, Hank Nussbacher wrote:
> I opened a trouble ticket with a major ISP in the USA about a Smurf
> originating at one of their customer nets targeted at me. I gave them the
> URL about Smurfing just in case they never heard about it.
>
> This is the email I got after 8 hours from their NOC:
>
> >***Note #1 03-20-1998 08:51:05 GMT Author: arsmith
> >
> > More info. requested
> >
> > Please send any samples along with the following info ASAP...
> > 1. Is it presently still going on ?
> > 2. Was your site used as a launching point for attacks on other entities ?
>
> How does one send "samples" of a Smurf (I gave them the originating IPs,
> destination IP, time, frequency, pkt size, etc.)? If this is how major ISPs
> handle Smurf storms, we can expect much more congestion. It is as if the
> ISP NOCs assume Smurf is Spam!
>
> -Hank
>
