On Mon October 24 2016 11:09, That One Guy /sarcasm wrote: > we are demoing a couple of netflow analysers since thursday, so we have the > networks traffic recorded from friday. Does anybody know what specific > criteria to look for to identify subscribers who may have been involved?
https://labs.ripe.net/Members/massimo_candela/a-quick-look-at-the-attack-on-dyn -- Larry Smith lesm...@ecsis.net