nanog mailing list archives
Re: ICMP Attacks???????
From: Michael Dillon <michael () priori net>
Date: Sat, 16 Aug 1997 16:14:23 -0700
Thank you Danny! This is exactly the sort of thing I was getting at. You've basically laid out the algorithm for tracing an attack to a specific port on your router. Now what we need to do is build a tool that can automate this procedure, perhaps by using an "expect" script or something similar like Python with PIPE.
Now comes the fun part, cooridinating with the Operations/Security folks from the corresponding network(s) to track the attack, hop-by-hop, through their network.
I suspect that this part would be a lot easier if some easy to use tools exist. Ever since I heard that IOPS was being formed I've been curious whether or not that would become a venue for building these kind of tools. Perhaps if someone from IOPS would come to Phoenix and tell us what they are up to, we might find some more ways to encourage this kind of inter-network cooperation. ******************************************************** Michael Dillon voice: +1-650-482-2840 Senior Systems Architect fax: +1-650-482-2844 PRIORI NETWORKS, INC. http://www.priori.net "The People You Know. The People You Trust." ********************************************************
Current thread:
- Re: ICMP Attacks??????? Dan Merillat (Aug 15)
- <Possible follow-ups>
- Re: ICMP Attacks??????? Danny McPherson (Aug 15)
- Re: ICMP Attacks??????? Alex.Bligh (Aug 16)
- Re: ICMP Attacks??????? Jon Lewis (Aug 16)
- Re: ICMP Attacks??????? David Ross (Aug 16)
- Re: ICMP Attacks??????? Peter E. Giza (Aug 16)
- Re: ICMP Attacks??????? Michael Dillon (Aug 16)
- Re: ICMP Attacks??????? Alex.Bligh (Aug 16)
- Re: ICMP Attacks??????? Danny McPherson (Aug 16)
- Re: ICMP Attacks??????? Vadim Antonov (Aug 17)
- Re: ICMP Attacks??????? Edward Henigin (Aug 18)
- RE: ICMP Attacks??????? Steve Carter (Aug 19)
- RE: ICMP Attacks??????? Erik E. Fair (Aug 21)
- Re: ICMP Attacks??????? Jon Green (Aug 21)
- Re: ICMP Attacks??????? Paul Ferguson (Aug 21)
- Re: ICMP Attacks??????? Jon Green (Aug 21)
- Message not available
- Re: ICMP Attacks??????? Jay R. Ashworth (Aug 21)
- RE: ICMP Attacks??????? Erik E. Fair (Aug 21)
- Message not available
- Re: ICMP Attacks??????? Jay R. Ashworth (Aug 21)