Re: This is a must read document. It will freak you out

[Jonas Luster]

* Zachary Uram sez:

: Would Cisco, Bay Networks etc. adopt it when it has matured and
: is ready for market?

Rumor has it, Cisco is working on technologies to track DoS sources via
Linecard hopping. This is being done by real life engineers already but
is bound to fail if the engineer is not fast enough or the guy on the
other side of your border is non-cooperative.

No technical way will be able to stop net.abuse forever, we can just try
to dry out known swamps.

: Why are ISPs so uncooperative?
: Isn't it in *their* best interest as well to limit needless bandwidth
: on their networks?

Filtering costs CPU. One of the problems with DoS are the CPU spikes
(ever seen IP-Input go to 60% while your BGP-Sessions start flapping?
:). That's why it's so damn problematic to filter. That and customers
who start whining if you do.

PGP signature