Re: OBESEUS - A new type of DDOS protector

2010-03-17 Thread Guillaume FORTAINE
e risk of upsetting your 1% type customers). This would work for that. Probably good at stomping torrents and other things as well. Best, Deepak -Original Message- From: Guillaume FORTAINE [mailto:gforta...@live.com] Sent: Monday, March 15, 2010 2:57 AM To: nanog@nanog.org Subject

Re: OBESEUS - A new type of DDOS protector

2010-03-16 Thread Guillaume FORTAINE
Dear Mister Dobbins, Thank you for your reply. Argus is OK, but I believe that it mainly relies upon packet capture - it does now support NetFlow v5, and v9 support as well as support for Juniper flow telemetry and others is supposed to be coming. Argus is a superset of Netflow [1]. It'

Re: OBESEUS - A new type of DDOS protector

2010-03-16 Thread Dobbins, Roland
On Mar 17, 2010, at 2:56 AM, Guillaume FORTAINE wrote: > What about Argus ? [1] Argus is OK, but I believe that it mainly relies upon packet capture - it does now support NetFlow v5, and v9 support as well as support for Juniper flow telemetry and others is supposed to be coming. I've persona

Re: OBESEUS - A new type of DDOS protector

2010-03-16 Thread Guillaume FORTAINE
Dear Mister Dobbins, Thank you for your reply. Flow telemetry has demonstrated its extraordinary utility to network operators worldwide over the last decade, and continued advances such as Cisco's Flexible NetFlow and the IETF IPFIX/PSAMP effort signify that this is the broad consensus of th

Re: OBESEUS - A new type of DDOS protector

2010-03-16 Thread Dobbins, Roland
On Mar 16, 2010, at 11:30 AM, Guillaume FORTAINE wrote: > What do you think about Obeseus ? Flow telemetry has demonstrated its extraordinary utility to network operators worldwide over the last decade, and continued advances such as Cisco's Flexible NetFlow and the IETF IPFIX/PSAMP effort sig

Re: OBESEUS - A new type of DDOS protector

2010-03-16 Thread Jorge Amodio
Is this a joke of some kind ? J

Re: OBESEUS - A new type of DDOS protector

2010-03-16 Thread William Pitcock
On Tue, 2010-03-16 at 07:53 +, gordon b slater wrote: > Hmm, the "hey! it's open source!" factor doesn't hold much sway in the > network world, no-one will be amazed at that. Many observers are > surprised at the amount of free software employed by ISPs and the > like, but it's certainly no new

Re: OBESEUS - A new type of DDOS protector

2010-03-16 Thread gordon b slater
On Tue, 2010-03-16 at 04:47 +0100, Guillaume FORTAINE wrote: > c) Its code is Open Source. > > http://www.loud-fat-bloke.co.uk/tools/obeseusvB.tar.gz > > > My conclusion is that I give far more credit to Obeseus than to Arbor > Networks. > Hmm, the "hey! it's open source!" factor doesn't hol

Re: OBESEUS - A new type of DDOS protector

2010-03-15 Thread Guillaume FORTAINE
Dear Mister Dobbins, Thank you for your reply. What do you think about Obeseus ? I look forward to your answer, Best Regards, Guillaume FORTAINE On 03/16/2010 05:16 AM, Dobbins, Roland wrote: On Mar 16, 2010, at 10:47 AM, Guillaume FORTAINE wrote: Especially, where is Roland Dobbins

Re: OBESEUS - A new type of DDOS protector

2010-03-15 Thread Richard Golodner
On Tue, 2010-03-16 at 04:47 +0100, Guillaume FORTAINE wrote: > Misters, > > Thank you for your reply. Mr. Fortaine, I am in communication with the gentlemen you address in your latest email on very rare occasions. I ask questions that are way out of my league, yet they answer me with hones

Re: OBESEUS - A new type of DDOS protector

2010-03-15 Thread Dobbins, Roland
On Mar 16, 2010, at 10:47 AM, Guillaume FORTAINE wrote: > Especially, where is Roland Dobbins ? At your service. ;> --- Roland Dobbins // Injustice is relatively easy to bear; what stings i

Re: OBESEUS - A new type of DDOS protector

2010-03-15 Thread Nathan Ward
If only there were other security experts on this list with a proven ability to make this thread even more absurd. On 16/03/2010, at 4:47 PM, Guillaume FORTAINE wrote: > Misters, > > Thank you for your reply. > > 1) First of all, I am absolutely not related to the Obeseus project. From my > p

Re: OBESEUS - A new type of DDOS protector

2010-03-15 Thread Guillaume FORTAINE
Misters, Thank you for your reply. 1) First of all, I am absolutely not related to the Obeseus project. From my point of view, the interesting things were that : a) This project was unknown. http://www.google.com/search?q="obeseus"+"ddos"&btnG=Search&hl=en&esrch=FT1&sa=2 b) This project c

Re: OBESEUS - A new type of DDOS protector

2010-03-15 Thread Suresh Ramasubramanian
I got your point. What I was saying is that what he calls EDoS (and I'm sure he'll say obliterating infrastructure is the ultimate form of an economic dos) is just what goes on ... You may or may not be able to overload the AWS infrastructure by too many queries but you sure as hell will blow the

Re: OBESEUS - A new type of DDOS protector

2010-03-15 Thread Christopher Morrow
On Mon, Mar 15, 2010 at 10:02 PM, Suresh Ramasubramanian wrote: > That's right M.Fortaine .. and your model does not, as yet, appear to > address what you term as EDoS and what the general security community > calls "DDoS" eh.. I guess I'm splitting hairs. the goal of 100k bots sending 1 query pe

Re: OBESEUS - A new type of DDOS protector

2010-03-15 Thread Suresh Ramasubramanian
That's right M.Fortaine .. and your model does not, as yet, appear to address what you term as EDoS and what the general security community calls "DDoS" On Tue, Mar 16, 2010 at 7:29 AM, Guillaume FORTAINE wrote: > From my point of view, it seems similar to the EDoS concept : > > http://www.ration

Re: OBESEUS - A new type of DDOS protector

2010-03-15 Thread Guillaume FORTAINE
Dear Mister Morrow, Thank you for your reply. To quote : "The advantage/disadvantage of 100,000+ host drone armies is that they don't actually *have* to flood you, per se. 10 pps (or less) each and you are going to crush almost everything without raising any alarms based on statistically sig

Re: OBESEUS - A new type of DDOS protector

2010-03-15 Thread Christopher Morrow
On Mon, Mar 15, 2010 at 9:44 PM, Guillaume FORTAINE wrote: > Dear Mister Jain, > > Thank you for your reply. > > You are speaking about EDoS (Economic Denial of Sustainability). Please see > the following article : > > http://www.rationalsurvivability.com/blog/?s=EDos > > Consider a new take on an

Re: OBESEUS - A new type of DDOS protector

2010-03-15 Thread Guillaume FORTAINE
57 AM To: nanog@nanog.org Subject: Re: OBESEUS - A new type of DDOS protector Dear Mister Wyble, Thank you for your reply. On 03/15/2010 07:00 AM, Charles N Wyble wrote: The paper is pretty high level, and the software doesn't appear to be available for download. http://www

RE: OBESEUS - A new type of DDOS protector

2010-03-15 Thread Deepak Jain
obably good at stomping torrents and other things as well. Best, Deepak > -Original Message- > From: Guillaume FORTAINE [mailto:gforta...@live.com] > Sent: Monday, March 15, 2010 2:57 AM > To: nanog@nanog.org > Subject: Re: OBESEUS - A new type of DDOS protector > >

Re: OBESEUS - A new type of DDOS protector

2010-03-14 Thread Guillaume FORTAINE
Dear Mister Wyble, Thank you for your reply. On 03/15/2010 07:00 AM, Charles N Wyble wrote: The paper is pretty high level, and the software doesn't appear to be available for download. http://www.loud-fat-bloke.co.uk/obeseus.html http://www.loud-fat-bloke.co.uk/tools/obeseusvB.tar.gz

Re: OBESEUS - A new type of DDOS protector

2010-03-14 Thread Charles N Wyble
Guillaume FORTAINE wrote: > Misters, > > No comments ? > > http://docs.google.com/viewer?url=http://www.loud-fat-bloke.co.uk/obeseus2.pdf > > > http://docs.google.com/viewer?url=http://www.parliament.uk/documents/upload/F012Interoute121109.pdf > > > http://barometer.interoute.com/barom_main.php Th

Re: OBESEUS - A new type of DDOS protector

2010-03-14 Thread Guillaume FORTAINE
te to have your comments on this project, if possible, please : "OBESEUS - A new type of DDOS protector" [7] http://www.loud-fat-bloke.co.uk/obeseus2.pdf For a better overview of the background of the project, please see the following document : "INQUIRY INTO EU POLICY ON PROT

OBESEUS - A new type of DDOS protector

2010-03-12 Thread Guillaume FORTAINE
read with interest the NANOG mails [2] [3] [4] and the Linkedin groups [5] [6] on this subject. Being an FPGA engineer, I approached this concern from an algorithmic point of view and that's why I would greatly appreciate to have your comments on this project, if possible, please : "OBE