[70235] in North American Network Operators' Group
RE: What percentage of the Internet Traffic is junk?
daemon@ATHENA.MIT.EDU (David Schwartz)
Wed May 5 18:27:00 2004
From: "David Schwartz" <davids@webmaster.com>
To: "Steve Gibbard" <scg@gibbard.org>,
"Mike Damm" <MikeD@irwinresearch.com>
Cc: <nanog@merit.edu>
Date: Wed, 5 May 2004 15:26:10 -0700
In-Reply-To: <20040505203952.63955.qmail@web14922.mail.yahoo.com>
X-MDaemon-Deliver-To: nanog@merit.edu
Reply-To: davids@webmaster.com
Errors-To: owner-nanog-outgoing@merit.edu
> I'm not sure that I'd agree with this statement. What
> about the traffic from compromised sources? The pps
> floods or spam emails are not being created with the
> knowledge of the source, so it would be hard to say
> that the source "wanted" to send it.
Exactly. A great example is a web server struggling to continue to accept
connections in the face of a spoofed SYN flood. The SYN/ACK packets are
junk.
The definition of "junk" is that the sender would not have wanted to send
it or the receiver would not have wanted to receive it if either had had a
chance to have the appropriate human or humans investiage the transaction in
full detail.
Traffic you are duped into sending by traffic you wish you hadn't received
or cannot distinguish from legitimate traffic is junk.
