North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

what's that smell?

  • From: Paul Vixie
  • Date: Mon Oct 07 18:56:55 2002 
since the last time we cleared the firewall statistics on c.root-servers.net,
1895GB of udp/53 input has led to 6687GB of udp/53 output, but, and this is
the important part now so pay attention, 185GB of input was dropped due to an
RFC1918 source address.

who needs DDOS when most network operators aren't filtering RFC1918 on output?
(there's only been 4.2GB of udp/2002 and other wormy traffic, by comparison.)

current winners of the "sustained input traffic over 100KBits/sec" award are
164.58.150.146, 200.52.12.131, and 195.146.194.12.  c-root keeps on ignoring
you, but you just never give up.  congradulations, or something.

(note that c-root's network operator has offered to filter RFC1918 on
input from other AS's, but it's actually useful to keep on measuring it.)