nanog mailing list archives
Odd DDoS, anyone else seen this?
From: "Stephen J. Wilcox" <steve () telecomplete co uk>
Date: Mon, 25 Nov 2002 13:02:04 +0000 (GMT)
Hi, we had a large DDoS over the weekend, I wondered if anyone else has seen this and knows what software is behind it. We saw many hundred thousand packets per second entering our network from various international peers, each packet was tcp destined to a single real end user IP address and sourced from a /16 network address eg 61.254.0.0, where the src was random and different on each packet but always x.x.0.0 I was unable to find out more about the data within the packet, the sheer volume made diagnosis impossible without killing the routers. Steve
Current thread:
- Odd DDoS, anyone else seen this? Stephen J. Wilcox (Nov 25)
- Re: Odd DDoS, anyone else seen this? variable (Nov 25)
- Re: Odd DDoS, anyone else seen this? Stephen J. Wilcox (Nov 25)
- Re: Odd DDoS, anyone else seen this? variable (Nov 25)
- Re: Odd DDoS, anyone else seen this? Valdis . Kletnieks (Nov 25)
- Re: Odd DDoS, anyone else seen this? Stephen J. Wilcox (Nov 25)
- Re: Odd DDoS, anyone else seen this? Christopher L. Morrow (Nov 25)
- Re: Odd DDoS, anyone else seen this? jlewis (Nov 25)
- Re: Odd DDoS, anyone else seen this? Joel Jaeggli (Nov 25)
- Message not available
- Re: Odd DDoS, anyone else seen this? Joe Provo (Nov 26)
- Re: Odd DDoS, anyone else seen this? variable (Nov 25)
- <Possible follow-ups>
- Re: Odd DDoS, anyone else seen this? variable (Nov 25)