nanog mailing list archives
RE: MicroSoft amplification?
From: Rishi Singh <RSingh () Tradescape com>
Date: Wed, 1 Aug 2001 23:54:32 -0400
The DUP packets resemble WLBS (Windows Load Balancing Service) in action. What platform did you ping it from? A unix host? Windows ping command does not show the extra icmp responses. Just a thought. -----Original Message----- From: Steven M. Bellovin [mailto:smb () research att com] Sent: Wednesday, August 01, 2001 8:18 PM To: Tony Rall Cc: nanog () merit edu Subject: Re: MicroSoft amplification? In message <OF3DD9155A.FA5F9232-ON88256A9B.00804F54 () almaden ibm com>, "Tony Ral l" writes:
I see it too, on that address and on the second of the 3 addresses mapped to www.microsoft.com (the third address doesn't respond at all). Most likely this is due to a not very smart load distribution system.
I'm told that that is indeed the case. Well, strike the "not very smart" part -- I wasn't told that -- but I was told that it is indeed because of the load distribution system. --Steve Bellovin, http://www.research.att.com/~smb
Current thread:
- MicroSoft amplification? Brandon Ross (Aug 01)
- <Possible follow-ups>
- Re: MicroSoft amplification? Tony Rall (Aug 01)
- Re: MicroSoft amplification? Adam Korab (Aug 01)
- Re: MicroSoft amplification? Valdis . Kletnieks (Aug 01)
- RE: MicroSoft amplification? Mike Batchelor (Aug 02)
- Re: MicroSoft amplification? Steven M. Bellovin (Aug 01)
- RE: MicroSoft amplification? Rishi Singh (Aug 01)
- Re: MicroSoft amplification? Tony Rall (Aug 01)
- RE: MicroSoft amplification? Tony Hain (Aug 02)