nanog mailing list archives
backtracking forged packets?
From: William Herrin <bill () herrin us>
Date: Fri, 13 Mar 2020 23:23:23 -0700
Howdy, Can anyone suggest tools, techniques and helpful contacts for backtracking spoofed packets? At the moment someone is forging TCP syns from my address block. I'm getting the syn/ack and icmp unreachable backscatter. Enough that my service provider briefly classified it a DDOS. I'd love to find the culprit. Thanks, Bill Herrin -- William Herrin bill () herrin us https://bill.herrin.us/
Current thread:
- backtracking forged packets? William Herrin (Mar 13)
- Re: backtracking forged packets? Jean | ddostest.me via NANOG (Mar 14)
- Re: backtracking forged packets? nanog (Mar 14)
- Re: backtracking forged packets? Alain Hebert (Mar 16)
- Re: backtracking forged packets? William Herrin (Mar 14)
- Re: backtracking forged packets? Jean | ddostest.me via NANOG (Mar 14)
- Re: backtracking forged packets? Damian Menscher via NANOG (Mar 14)
- Re: backtracking forged packets? Amir Herzberg (Mar 15)
- Re: backtracking forged packets? Jean | ddostest.me via NANOG (Mar 15)
- Re: backtracking forged packets? William Herrin (Mar 15)
- Re: backtracking forged packets? Amir Herzberg (Mar 15)
- Re: backtracking forged packets? nanog (Mar 14)
- Re: backtracking forged packets? Jean | ddostest.me via NANOG (Mar 14)