[52916] in North American Network Operators' Group
Re: WP: Attack On Internet Called Largest Ever
daemon@ATHENA.MIT.EDU (David Conrad)
Wed Oct 23 11:00:11 2002
Date: Wed, 23 Oct 2002 07:59:37 -0700
From: David Conrad <david.conrad@nominum.com>
To: Greg Pendergrass <greg@band-x.com>, nanog <nanog@merit.edu>
In-Reply-To: <NHEFLBCNBEKGPCFNBKHJGEPFEAAA.greg@band-x.com>
Errors-To: owner-nanog-outgoing@merit.edu
Hi,
On 10/23/02 7:31 AM, "Greg Pendergrass" <greg@band-x.com> wrote:
> It's universally agreed that the articles have mostly been blown out of
> proportion and dramatized, but that doesn't mean that attacks against the
> root servers can't be successful. Future attacks will be stronger and more
> organized. So how do we protect the root servers from future attack?
See RFC3258.
> There has been a lot about what did not happen yesterday, but how about some
> details about what did happen? Was it a ping flood, syn-flood, smurf, or
> some combination of types? Were the zombie machines windows, linux, or both?
> Some of the root servers were affected more than others, why? Was it that
> there was more ddos traffic directed at them, or that they had less hardware
> and network resources?
I'll let others with more direct information answer this.
Rgds,
-drc