Re: [j-nsp] TCP SYN attack causing BGP peer down?

2008-10-28 Thread Mark Tinka
On Wednesday 29 October 2008 04:05:11 Scott Weeks wrote: > Could've it sent the CPU of the upstream router through > the roof? If they are using a software-based router and it was overloaded, yes - otherwise, the attack would have terminated at their router. Cheers, Mark. signature.asc Des

Re: [j-nsp] TCP SYN attack causing BGP peer down?

2008-10-28 Thread Scott Weeks
--- [EMAIL PROTECTED] wrote: From: Mark Tinka <[EMAIL PROTECTED]> On Wednesday 29 October 2008 04:05:11 Scott Weeks wrote: > Could've it sent the CPU of the upstream router through > the roof? If they are using a software-based router and it was overloaded, yes - otherwise, the attack would h

Re: [j-nsp] TCP SYN attack causing BGP peer down?

2008-10-28 Thread Scott Weeks
- Original Message - From: "Scott Weeks" <[EMAIL PROTECTED]> > --- [EMAIL PROTECTED] wrote: > > We experienced a TCP SYN attack from internet today (about 350,000 pps). > Our internet pipe with ISP is 300Mb/s. The attack caused our BGP peer to > be tear down. Just wondering why this co

Re: [j-nsp] TCP SYN attack causing BGP peer down?

2008-10-28 Thread Richard A Steenbergen
On Tue, Oct 28, 2008 at 11:31:29AM -0700, ying zhang wrote: > ? > We experienced a TCP SYN attack from internet today (about 350,000 > pps). Our internet pipe with ISP is 300Mb/s. The attack caused our BGP > peer to be tear down. Just wondering why this could happen if our pipe > is not fully satur

Re: [j-nsp] TCP SYN attack causing BGP peer down?

2008-10-28 Thread Ying Zhang
Tuesday, October 28, 2008 3:51 PM Subject: Re: [j-nsp] TCP SYN attack causing BGP peer down? --- [EMAIL PROTECTED] wrote: From: ying zhang <[EMAIL PROTECTED]> We experienced a TCP SYN attack from internet today (about 350,000 pps). Our internet pipe with ISP is 300Mb/s. The attack caus

Re: [j-nsp] TCP SYN attack causing BGP peer down?

2008-10-28 Thread Scott Weeks
--- [EMAIL PROTECTED] wrote: From: ying zhang <[EMAIL PROTECTED]>   We experienced a TCP SYN attack from internet today (about 350,000 pps). Our internet pipe with ISP is 300Mb/s. The attack caused our BGP peer to be tear down. Just wondering why this could happen if our pipe is not fully satur

[j-nsp] TCP SYN attack causing BGP peer down?

2008-10-28 Thread ying zhang
  We experienced a TCP SYN attack from internet today (about 350,000 pps). Our internet pipe with ISP is 300Mb/s. The attack caused our BGP peer to be tear down. Just wondering why this could happen if our pipe is not fully saturated? Shouldn't the BGP packets have the highest priority? Is there