nanog mailing list archives

Re: smurf amp nets, the registry (SAR)


From: Taner Halicioglu <taner () isi net>
Date: Mon, 15 Jun 1998 23:32:20 -0700

On Tue, Jun 16, 1998 at 01:16:14PM -0400, Richard Thomas <buglord () ex-pressnet com> wrote:

The biggest I've ever found is 12.79.237.0, depending on the host you ping
it from you can get between 900-1200 dupes, all from 12.79.237.1 which
reverses to 1.new-york-60rs.ny.dial-access.att.net. I've mailed at&t about
this several times and have gotten no response.

wow.. that ruled...

taner@coredump:~ >wc FILE
   7804   78004  823296 FILE

that was from a ping 12.79.237.0 | grep 'seq=0' | tee FILE, and I waited
until it stopped scrolling (and them some for good measure).

good lord...

I got some of these, too:

taner@coredump:~ >grep "Time to live exceeded" FILE | sort | uniq -c
     14 packet seq=0 bounced at 199.70.3.198: Time to live exceeded
      7 packet seq=0 bounced at 199.70.3.200: Time to live exceeded
      7 packet seq=0 bounced at 199.70.3.201: Time to live exceeded
      7 packet seq=0 bounced at 199.70.3.202: Time to live exceeded


*shrug*

Anyone from AT&T listening? :)

        -Taner



Current thread: