heys,
ran into something interesting today. not sure if it is a dos attack or if
it
indicates an ip stack misconfig. here is the symptom:
periodically through the day today we received 100,000 packet bursts on a t-1
circuit. this is a name-brand provider. when the burst occurs it is from
the
s
riginal Message-
From: Garrett Allen [mailto:garrett.allen@;erols.com]
Sent: Friday, October 25, 2002 10:51 PM
To: [EMAIL PROTECTED]
Subject: ack attack or config prob? [7:56341]
heys,
ran into something interesting today. not sure if it is a dos attack or
if
it
indicates an ip stack misconfig. here
g.
thanks.
- Original Message -
From: "Mark W. Odette II"
To:
Sent: Saturday, October 26, 2002 3:41 PM
Subject: RE: ack attack or config prob? [7:56341]
> I don't have an answer to your question, though it does sound like a DoS
> attack to me...
>
> My only in
It sounds like you were under attack, though it's hard to say for sure. I
doubt that it's a misconfig on your end, though. It could be a misconfig at
the other server, but probably not. I don't think you can set the parameters
that badly!? :-)
It sounds like a DoS attack because of the volume of 1
priscilla,
the bursts were
To:
Sent: Saturday, October 26, 2002 7:40 PM
Subject: RE: ack attack or config prob? [7:56341]
> It sounds like you were under attack, though it's hard to say for sure. I
> doubt that it's a misconfig on your end, though. It could be a misconfi
are so many
possibilities and it forces one to think about all the many things that can
go wrong.
thanks for your insights and thoughtful questions.
- Original Message -
From: "Garrett Allen"
To:
Sent: Saturday, October 26, 2002 9:59 PM
Subject: Re: ack attack or config prob?
e same.
C
- Original Message -
From: "Garrett Allen"
To:
Sent: Sunday, October 27, 2002 3:14 AM
Subject: Re: ack attack or config prob? [7:56341]
> the filter doesn't like special characters. sorry. here is another try
> without the less than symbol:
>
> priscilla
7 matches
Mail list logo
