North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: New Denial of Service Attack on Panix

  • From: Leonid Egoshin
  • Date: Tue Sep 17 19:38:53 1996 
>From: "Forrest W. Christian" <[email protected]>
>
>  5 minute SYNS: 123423   5 minute SYN-ACKS: 50000
>
>Then, if the ratio got too high, it can start yelping about "Potential SYN 
>D-O-S Atttack in progress on Interface Serial 1"

    I suggest to check not only ratio (assymetric routing !),
but high number of SYNs to single host.

				- Leonid Yegoshin, LY22
- - - - - - - - - - - - - - - - -