Death of the Internet, Film at 11

Mike Hammett nanog at
Sat Oct 22 14:50:17 UTC 2016

If they are easy to trace, then it should be easy for you to tell me how to find them on my network. 

The addresses being known to them doesn't help me at all clean up my network or help other networks clean up theirs. 

It would be rather difficult for me (and I'm sure many other operators) to distinguish normal Dyn traffic from DDoS Dyn traffic. 

Mike Hammett 
Intelligent Computing Solutions 


----- Original Message -----

From: "Brandon Butterworth" <brandon at> 
To: nanog at 
Cc: nanog at 
Sent: Saturday, October 22, 2016 9:41:52 AM 
Subject: Re: Death of the Internet, Film at 11 

> "their" Whose addresses are known 

The "CCVT thingies" you refer to. Unlike spoof 
attacks these are easy to trace 

> and who are they known to? 

Those who were attacked by them or worked on mitigation of 
the attack. If not this time then they should next time 
as there will be a next time. 

> Some work can produce Dyn allocations, I suppose. 

Indeed, that is what I was saying 


More information about the NANOG mailing list