nanog mailing list archives
RE: The impending DDoS storm
From: Christopher Chin <cchin () ack Berkeley EDU>
Date: Thu, 14 Aug 2003 08:32:56 -0700 (PDT)
Today at 11:24 (-0400), Josh Fleishman wrote:
Date: Thu, 14 Aug 2003 11:24:53 -0400 From: Josh Fleishman <flyman2 () corp earthlink net> To: nanog () merit edu Subject: RE: The impending DDoS storm Has anyone determined a method for triggering the DOS attack manually? We've attempted this by changing an infected machine's clock, however it did not work on our test box. If anyone has triggered the attack, do you have a copy of the sniffed data stream?
Josh, Have you tried rebooting the infected box? Apparently, the date check and decision to DoS or infect others comes early on in the code and is not rechecked. - Christopher ======================
Current thread:
- Re: The impending DDoS storm, (continued)
- Re: The impending DDoS storm Lloyd Taylor (Aug 13)
- Re: The impending DDoS storm Jason Frisvold (Aug 13)
- Re: The impending DDoS storm Dan Hollis (Aug 13)
- Re: The impending DDoS storm Aaron Hopkins (Aug 13)
- Re: The impending DDoS storm Jeff Kell (Aug 14)
- Re: The impending DDoS storm Jack Bates (Aug 13)
- Re: The impending DDoS storm Mark Vallar (Aug 13)
- RE: The impending DDoS storm Christopher Chin (Aug 14)
- RE: The impending DDoS storm Kevin Houle (Aug 14)
- Re: The impending DDoS storm Michael Painter (Aug 14)
- RE: The impending DDoS storm Darren Richer (Aug 14)