sean at donelan.com (Sean Donelan) writes: > Best guess, its a smurf attack. Networks which still have ip > directed-broadcast (or your vendor's equivalent) enabled on interfaces. > > Its still amazing how much traffic it can generate. however, this attack was icmp request, not icmp reply. -- Paul Vixie