North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: real-time DDoS help?

  • From: Rubens Kuhl Jr.
  • Date: Sat Jun 19 22:55:04 2004

> Is there any place where people with experience dealing with DDoS attacks
> hang out?  I'm getting very little assistance from my upstream beyond
> "call whomever is in charge of each IP attacking and make them stop", and
> "even though we null route the destination IP being attacked, this traffic
> will be billed".

It seems that you should look somewhere else for your next bandwidth
contract...

> I've got a nice snippet of flows, so I can mostly see where everything is
> coming from, and it's obvious what the target is, but my
> flow-stat/flow-report skills are pretty weak.

Fake or real source IPs ? TCP SYNs, ICMPs, UDPs ?



Rubens