North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: New Denial of Service Attack on Panix

  • From: Paul Ferguson
  • Date: Wed Sep 18 19:33:29 1996 
For what its worth, we are looking at this.

- paul


At 04:32 PM 9/17/96 -0700, Leonid Egoshin wrote:

>>From: "Forrest W. Christian" <[email protected]>
>>
>>  5 minute SYNS: 123423   5 minute SYN-ACKS: 50000
>>
>>Then, if the ratio got too high, it can start yelping about "Potential SYN 
>>D-O-S Atttack in progress on Interface Serial 1"
>
>    I suggest to check not only ratio (assymetric routing !),
>but high number of SYNs to single host.
>
>				- Leonid Yegoshin, LY22
>

--
Paul Ferguson                                           ||        ||
Consulting Engineering                                  ||        ||
Reston, Virginia   USA                                 ||||      ||||
tel: +1.703.716.9538                               ..:||||||:..:||||||:..
e-mail: [email protected]                         c i s c o S y s t e m s

- - - - - - - - - - - - - - - - -