Large DDoS, small extortion

Roland Dobbins rdobbins at
Thu May 22 14:57:39 UTC 2014

On May 22, 2014, at 11:51 AM, Beleaguered Admin <dealing.with.ddos at> wrote:

> While we are interested in technical means to mitigate the attacks (the syn and syn/acks are brutal, all cores pegged on multicore 10G nic servers just dealing with interrupts),

Here's how to get started:


Ensure you have flow telemetry enabled at all your edges; there are open-source tools like nfsen/nfdump that you can get started with quickly.

Roland Dobbins <rdobbins at> // <>

                   Equo ne credite, Teucri.

    		   	  -- Laocoön

More information about the NANOG mailing list