[52914] in North American Network Operators' Group
RE: WP: Attack On Internet Called Largest Ever
daemon@ATHENA.MIT.EDU (Iljitsch van Beijnum)
Wed Oct 23 10:54:37 2002
Date: Wed, 23 Oct 2002 16:52:05 +0200 (CEST)
From: Iljitsch van Beijnum <iljitsch@muada.com>
To: Greg Pendergrass <greg@band-x.com>
Cc: "'Nanog@Merit. Edu'" <nanog@merit.edu>
In-Reply-To: <NHEFLBCNBEKGPCFNBKHJGEPFEAAA.greg@band-x.com>
Errors-To: owner-nanog-outgoing@merit.edu
On Wed, 23 Oct 2002, Greg Pendergrass wrote:
> There has been a lot about what did not happen yesterday, but how about some
> details about what did happen? Was it a ping flood, syn-flood, smurf, or
> some combination of types? Were the zombie machines windows, linux, or both?
> Some of the root servers were affected more than others, why? Was it that
> there was more ddos traffic directed at them, or that they had less hardware
> and network resources?
And, calling a recent thread to attention: were the packets from valid
sources or were they spoofed, and if so, what was the source address
distribution like?