[41276] in North American Network Operators' Group
Re: Upsurge in attacks?
daemon@ATHENA.MIT.EDU (Todd Suiter)
Wed Sep 5 00:15:39 2001
Date: Tue, 4 Sep 2001 21:15:04 -0700 (PDT)
From: Todd Suiter <todd@s4r.com>
To: Chris Rapier <rapier@psc.edu>
Cc: <deepak@ai.net>, "Nanog@Merit. Edu" <nanog@merit.edu>
In-Reply-To: <3B958AD7.FBA8DDE2@psc.edu>
Message-ID: <Pine.GSO.4.33.0109042111190.13230-100000@sashimi.space4rent.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Errors-To: owner-nanog-outgoing@merit.edu
> Well... depends on the kind fo attack. I'm actually seeing fewer large
> packet ICMP attacks than I was a couple of months ago. I'm guessing this
> is because more zombied machine have been cleared out. There are the
> normal number of scans that one might expect (bored freshmen with
> ethernet connectiosn to the fatest network they've ever seen, what would
> you do?) but, suprisingly enough the number of naive DoS attacks seems
> to be on the decline around me. I need to look at the security logs a
> little closer but I think I'm correct. I wrote our security stuff but
> I've not looked at it in almost a month now.
Can you clarify that last bit some? You've not looked at the code? Filters? As far as freshhmen with 'phat pipe', in this day and age, I expect a little
restraint and common sense, but we _are_, generally speaking, talking about American college students. Neither of which seem to be in great supply.
t
