[4273] in North American Network Operators' Group
Re: Re[4]: SYN floods (was: does history repeat itself?)
daemon@ATHENA.MIT.EDU (Perry E. Metzger)
Tue Sep 10 17:19:13 1996
To: "Alec H. Peterson" <chuckie@panix.com>
cc: nanog@merit.edu
In-reply-to: Your message of "Tue, 10 Sep 1996 17:05:21 EDT."
<199609102105.RAA20652@panix2.panix.com>
Reply-To: perry@piermont.com
Date: Tue, 10 Sep 1996 17:14:33 -0400
From: "Perry E. Metzger" <perry@piermont.com>
"Alec H. Peterson" writes:
> This is true, but if it is a valid host, the invalid SYNs will do
> nothing, because the source host will send a RST and the
> almost-connection will be torn down. And if it isn't a valid host, it
> will still be _much_ easier to track, because you know in general
> where it's coming from.
There are far, far meaner things you can do with a pair of valid
hosts, Alec.
And no, I don't particularly care to get in to all of them.
Perry
