nanog mailing list archives
Re: Filter NTP traffic by packet size?
From: Nick Hilliard <nick () foobar org>
Date: Sat, 22 Feb 2014 15:06:32 +0000
On 22/02/2014 09:07, Cb B wrote:
Summary IETF response: The problem i described is already solved by bcp38, nothing to see here, carry on with UDP
udp is here to stay. Denying this is no more useful than trying to push the tide back with a teaspoon. It's worth bearing in mind that any open tcp service will send out several acks before giving up. In other words, any standard open tcp socket will provide a level of amplification worth using even if UDP were to be switched off tomorrow. Sure, not as good as the 230x amplification that ntp monlist will give, but it's still a problem. In the long term, it would be more useful to spent time and effort building automated tools to track down the sources of the spoofed packets than trying to deprecate UDP. Nick
Current thread:
- Re: Filter NTP traffic by packet size?, (continued)
- Re: Filter NTP traffic by packet size? TGLASSEY (Feb 20)
- Re: Filter NTP traffic by packet size? Cb B (Feb 21)
- Re: Filter NTP traffic by packet size? Damian Menscher (Feb 21)
- Re: Filter NTP traffic by packet size? Cb B (Feb 21)
- Re: Filter NTP traffic by packet size? Seth Mattinen (Feb 21)
- Re: Filter NTP traffic by packet size? Saku Ytti (Feb 22)
- Re: Filter NTP traffic by packet size? Carsten Bormann (Feb 22)
- Re: Filter NTP traffic by packet size? Cb B (Feb 22)
- Re: Filter NTP traffic by packet size? Carsten Bormann (Feb 22)
- Re: Filter NTP traffic by packet size? Randy Bush (Feb 22)
- Re: Filter NTP traffic by packet size? Nick Hilliard (Feb 22)
- Re: Filter NTP traffic by packet size? Paul Ferguson (Feb 22)
- Re: Filter NTP traffic by packet size? Chris Laffin (Feb 22)
- Re: Filter NTP traffic by packet size? Peter Phaal (Feb 22)
- Re: Filter NTP traffic by packet size? Chris Laffin (Feb 23)
- Re: Filter NTP traffic by packet size? Mikael Abrahamsson (Feb 23)
- Re: Filter NTP traffic by packet size? Peter Phaal (Feb 23)
- Re: Filter NTP traffic by packet size? sthaug (Feb 23)
- Re: Filter NTP traffic by packet size? Lukasz Bromirski (Feb 23)
- Re: Filter NTP traffic by packet size? Mikael Abrahamsson (Feb 23)
- Re: Filter NTP traffic by packet size? George William Herbert (Feb 23)