[59188] in North American Network Operators' Group
Re: Slow and Fast IP addresses on http ?
daemon@ATHENA.MIT.EDU (Rob Thomas)
Tue Jun 17 13:35:54 2003
Date: Tue, 17 Jun 2003 12:34:28 -0500 (CDT)
From: Rob Thomas <robt@cymru.com>
To: NANOG <nanog@merit.edu>
In-Reply-To: <20030617172853.0078D7B4D@berkshire.research.att.com>
Errors-To: owner-nanog-outgoing@merit.edu
Hi, NANOGers.
] I'm not defending the practice, I'm defending myself against the
] practitioners.
Indeed. This can also be a problem during certain attack types,
particularly during TCP amplification attacks. No response means
that IP stacks send yet another SYN, then another, then another.
The number depends on the IP stack in use.
Thanks,
Rob.
--
Rob Thomas
http://www.cymru.com
ASSERT(coffee != empty);
