On 22 Dec 2016, at 20:27, Jean | ddostest.me via NANOG wrote: > the already known Layer 4 amp DDoS like dns, ntp, ssdp, snmp These are layer-7 reflection/amplification attacks - i.e., application-layer - *not* layer-4. ----------------------------------- Roland Dobbins <rdobbins at arbor.net>