[182072] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Possible Sudden Uptick in ASA DOS?

daemon@ATHENA.MIT.EDU (Mark Andrews)
Thu Jul 9 22:06:00 2015

X-Original-To: nanog@nanog.org
To: "Chuck Church" <chuckchurch@gmail.com>
From: Mark Andrews <marka@isc.org>
In-reply-to: Your message of "Thu, 09 Jul 2015 21:43:55 -0400."
 <011d01d0bab1$e7890a00$b69b1e00$@gmail.com>
Date: Fri, 10 Jul 2015 12:05:50 +1000
Cc: nanog@nanog.org
Errors-To: nanog-bounces@nanog.org


In message <011d01d0bab1$e7890a00$b69b1e00$@gmail.com>, "Chuck Church" writes:
> -----Original Message-----
> From: NANOG [mailto:nanog-bounces@nanog.org] On Behalf Of Jared Mauch
> Sent: Thursday, July 09, 2015 9:08 AM
> To: Colin Johnston
> Cc: nanog@nanog.org
> Subject: Re: Possible Sudden Uptick in ASA DOS?
>
> >My guess is a researcher.
>
>
> I wouldn't classify someone sending known malicious traffic towards
> someone else's network device attempting to crash it as a 'researcher'.
> Criminal is a better term.
>
> Chuck

At what point does a well formed but bug triggering packet go from
"malicious" to "expected"?

Mark
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka@isc.org

home help back first fref pref prev next nref lref last post