North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: netscan.org update

  • From: Troy Davis
  • Date: Tue Sep 26 12:53:17 2000

On Tue, 26 Sep 2000, Roeland M.J. Meyer <[email protected]> wrote:

> I know that all of you are aware of this. Granted, each subsequently
> smaller subnet also limits the maximum number of hosts that will respond
> to the smurf trigger. The point is that, the web-site ONLY tests 0 and

Actually, that's often not the case.  Through NAT and other modern
marvels, it's possible to have massively overpopulated netblocks that
all respond.  The largest amplifier we've found yet was 170,000x (on 
a class C).

> the script-kiddees already have a means to do so. Had I the time, I
> could write the code, the algorithm is trivial.

We've got the code to scan for them, but started with /24.  In October 
or November, we'll probably scan to /27 boundaries.

Also, there's now a list of amplifiers, sorted by ASN, rechecked and 
updated nightly.  It's linked off the main netscan.org page.

Cheers,

Troy