Large DDoS, small extortion

Thu May 22 14:57:39 UTC 2014

On May 22, 2014, at 11:51 AM, Beleaguered Admin <dealing.with.ddos at gmail.com> wrote:

> While we are interested in technical means to mitigate the attacks (the syn and syn/acks are brutal, all cores pegged on multicore 10G nic servers just dealing with interrupts),

Here's how to get started:

<http://mailman.nanog.org/pipermail/nanog/2010-January/016747.html>

Ensure you have flow telemetry enabled at all your edges; there are open-source tools like nfsen/nfdump that you can get started with quickly.

----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

                   Equo ne credite, Teucri.

    		   	  -- Laocoön