On 2010-12-08 14:06 -0600, Philip Dorr wrote:
> The problem is that they were also slashdotted.  The logs would also have a
> large number of unrelated.

"so... the loic tool uses the host's local address, the attacks are all 
HTTP based, or tcp/80 with malformed HTTP..."

That should be easy to grep by...?

-- 
- Olof Johansson
-  www:          http://www.stdlib.se/
-  {mail,xmpp}:  o...@ethup.se
-  irc:          zibri on Freenode/OFTC/...
--

Attachment: signature.asc
Description: Digital signature

Reply via email to