[27403] in North American Network Operators' Group
FWD >New Tool for DDoS Defense
daemon@ATHENA.MIT.EDU (Sehmel, William C.)
Thu Feb 17 01:30:46 2000
Message-ID: <002201bf7910$f8c411a0$22aaced1@newpc>
From: "Sehmel, William C." <bsehmel@narrows.com>
To: "NANOG" <nanog@merit.edu>
Date: Wed, 16 Feb 2000 22:33:56 -0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Errors-To: owner-nanog-outgoing@merit.edu
Forwarded from Bugtraq
<snip>
I've written a tool for remotely telling ddos zombies to stop flooding.
Most detectors out there will not detect during a flood (due to the
traffic involved), so I thought trying to turn the flood off might be kind
of nice. Like the detectors, it assumes default settings on the ddos
daemons. Works against Trinoo, TFN, and Stacheldraht.
Go to http://razor.bindview.com/ and follow the links to Zombie Zapper,
unix and NT versions available with source code.
- Simple Nomad - No rest for the Wicca'd -
- thegnome@nmrc.org - www.nmrc.org -
- thegnome@razor.bindview.com - razor.bindview.com -
</snip>
