Re: netscan.org update

[Troy Davis <troy () nack net>]

On Tue, 26 Sep 2000, Roeland M.J. Meyer <rmeyer () MHSC com> wrote:

> I know that all of you are aware of this. Granted, each subsequently
> smaller subnet also limits the maximum number of hosts that will respond
> to the smurf trigger. The point is that, the web-site ONLY tests 0 and

Actually, that's often not the case.  Through NAT and other modern
marvels, it's possible to have massively overpopulated netblocks that
all respond.  The largest amplifier we've found yet was 170,000x (on 
a class C).

> the script-kiddees already have a means to do so. Had I the time, I
> could write the code, the algorithm is trivial.

We've got the code to scan for them, but started with /24.  In October 
or November, we'll probably scan to /27 boundaries.

Also, there's now a list of amplifiers, sorted by ASN, rechecked and 
updated nightly.  It's linked off the main netscan.org page.

Cheers,

Troy