source filtering

Tue Jan 12 19:45:38 UTC 1999

My data against IRC servers shows otherwise.  I see
a *great* number of UDP floods -- but they're not reflected
attacks.  They typically consist of a well-connected but
poorly-secured machine at a university.

/cah

On Tue, Jan 12, 1999 at 11:02:44AM -0800, Dan Hollis wrote:
==>On Tue, 12 Jan 1999, Alex Bligh wrote:
==>> Is UDP smurf much in evidence?
==>
==>Yes. About 50% of the smurf attacks we get are UDP.
==>
==>-Dan