[45091] in North American Network Operators' Group
Re: Growing DoS attacks
daemon@ATHENA.MIT.EDU (Jared Mauch)
Wed Jan 16 13:18:45 2002
Date: Wed, 16 Jan 2002 13:18:14 -0500
From: Jared Mauch <jared@puck.Nether.net>
To: Paul Froutan <pfroutan@rackspace.com>
Cc: nanog@merit.edu
Message-ID: <20020116181814.GC10792@puck.nether.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <5.1.0.14.2.20020116114105.0256fed8@pop3.rackspace.com>
Errors-To: owner-nanog-outgoing@merit.edu
are you seeting these attacks be related to the lack of
anti spoofing filters? where do they tend to be originating these
days?
i suspect that 1) smurf amps that are still not fixed, 2)
high speed connectivity at homes (cable, .. some dsl still,) are allowing
people to send spoofed packets at higher rates.
that combined and the number of windows based servers that
have been exploited (nimda, etc..) and those can be used also to send
spoofed packets at higher rates.
- jared
On Wed, Jan 16, 2002 at 11:45:05AM -0600, Paul Froutan wrote:
> Hello all,
> Can some of you with larger networks let me know about the volume of the
> DoS attacks you have experienced lately? Our experience has been that the
> volume (not just occurrence) is going up significantly and I'm curious on
> the size of attacks that people are experiencing. For reference, while a
> year or two ago we used to get 50-100 meg attacks, now we're getting 500+
> megs.
> Thanks
>
> _________________________________________
> Paul Froutan, VP Engineering and Operations
> Rackspace Managed Hosting
> Email: pfroutan@rackspace.com
> ----------------------------------------------------------------------
>
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.313 / Virus Database: 174 - Release Date: 1/2/2002
--
Jared Mauch | pgp key available via finger from jared@puck.nether.net
clue++; | http://puck.nether.net/~jared/ My statements are only mine.
