From lucas@wasteland.org Mon Sep 16 11:03:54 1996 Received: (sendmail@localhost) by suburbia.net (8.7.4/Proff-950810) id LAA15111 for ; Mon, 16 Sep 1996 11:03:49 +1000 Received: from srq04.netline.net(205.160.7.44), claiming to be "wrath.netline.net" via SMTP by profane.adso.com.au, id smtpd14836aaa; Mon Sep 16 01:03:33 1996 Received: from localhost (lucas@localhost) by wrath.netline.net (8.6.12/8.6.9) with SMTP id VAA00106; Mon, 16 Sep 1996 21:01:31 -0400 X-Authentication-Warning: wrath.netline.net: lucas owned process doing -bs Date: Mon, 16 Sep 1996 21:01:30 -0400 (EDT) From: Synthesizer Punk X-Sender: lucas@wrath.netline.net To: route@onyx.infonexus.com cc: best-of-security@suburbia.net Subject: Re: BoS: ping flood In-Reply-To: <19960915163917.7232.qmail@onyx.infonexus.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII On Sun, 15 Sep 1996 route@onyx.infonexus.com wrote: :Synthesizer Punk's thoughts were: :I hate to be the one to bring up the obvious, but the DOS attack of :choice lately is TCP SYN flooding. Low bandwith, virtually untraceable, :and quite difficult for the average ISP to deal with... FWIW: PLEASE! :Let's not start another debate on the subject. There is enough going :around as it is. I merely wanted to mention it. Nothing more... :Octopus uses TCP-based sockets...;) But, sure, UDP storms, Syslogd floods, :etc... Any protocol can be abused... I know that much at least :) It was one of the first socket programs I ever examined... I just didn't mention the fact that it was TCP 8^) I also viewed the neptune white paper, by route.. (who the hell IS that guy? *smile*) which led me to a better understanding of the subject. I bought TCP/IP Illustrated I today, for hopefully a better understanding of the subject. routeInk.tga.. now there's a tattoo 8^) cryptopsychonihilisticanarchaicstraightedgeinformationfreaksynthesizerpunk lucas@wasteland.org, ftp://valkyrie.wasteland.org, irc://irc.wasteland.org http://www.wasteland.org, information enthusiast extraodinaire.