DDoS using port 0 and 53 (DNS)
Dobbins, Roland
rdobbins at arbor.net
Wed Jul 25 16:39:13 UTC 2012
On Jul 25, 2012, at 9:52 PM, Joel Maslak wrote:
> In addition to the fragments, these packets might also be non-TCP/UDP (ICMP, GRE, 6to4 and other IP-IP, etc).
NetFlow will report the correct protocol number.
-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>
Luck is the residue of opportunity and design.
-- John Milton
More information about the NANOG
mailing list