[45374] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Fwd: SlashDot: "Comcast Gunning for NAT Users"

daemon@ATHENA.MIT.EDU (E.B. Dreger)
Thu Jan 31 17:48:03 2002

Date: Thu, 31 Jan 2002 22:44:02 +0000 (GMT)
From: "E.B. Dreger" <eddy+public+spam@noc.everquick.net>
To: "Eric A. Hall" <ehall@ehsco.com>
Cc: Dan Hollis <goemon@anime.net>, nanog@merit.edu
In-Reply-To: <3C59C66D.B8E2615@ehsco.com>
Message-ID: <Pine.LNX.4.20.0201312240500.15960-100000@www.everquick.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Errors-To: owner-nanog-outgoing@merit.edu


> Date: Thu, 31 Jan 2002 16:34:21 -0600
> From: Eric A. Hall <ehall@ehsco.com>

> Then use six or eight or 20000 or whatever number is above the
> 90% false positive threshold

Which requires accurate correlation between number of sessions
and shared connections.  Still false positives, or false
negatives galore...

If one assumes a 10% duty cycle for someone casually browsing the
Web using HTTP/1.1, many of those users could share a single
physical connection with only a few open TCP connections.


Eddy

Brotsman & Dreger, Inc. - EverQuick Internet Division
Phone: +1 (316) 794-8922 Wichita/(Inter)national
Phone: +1 (785) 865-5885 Lawrence
--

Date: Mon, 21 May 2001 11:23:58 +0000 (GMT)
From: A Trap <blacklist@brics.com>
To: blacklist@brics.com
Subject: Please ignore this portion of my mail signature.

These last few lines are a trap for address-harvesting spambots.  Do NOT
send mail to <blacklist@brics.com>, or you are likely to be blocked.


home help back first fref pref prev next nref lref last post