Tracking the DNS amplification attacks (was: isprime DOS in progress)

Brian Keefer chort at smtps.net
Sun Jan 25 09:22:51 UTC 2009


On Jan 24, 2009, at 7:00 PM, Frank Bulk wrote:
>
> -----Original Message-----
> From: Brian Keefer [mailto:chort at smtps.net]
>
> Caveat:  my PERL is _terrible_.
>
> http://www.smtps.net/pub/dns-amp-watch.pl
>
> I would not recommend sucking in your dns log into array, rather,  
> read line
> by line and iterate over the file, line by line.
>
> Frank


Yep, you're absolutely right.  I copied that bit from another script  
without thinking.

It's fixed now, along with the logic error on an empty array.  Thanks  
for the feedback.

--
bk

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 1613 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20090125/f4199e97/attachment.bin>


More information about the NANOG mailing list