nanog mailing list archives

Re: Slow and Fast IP addresses on http ?


From: Rob Thomas <robt () cymru com>
Date: Tue, 17 Jun 2003 12:34:28 -0500 (CDT)


Hi, NANOGers.

] I'm not defending the practice, I'm defending myself against the
] practitioners.

Indeed.  This can also be a problem during certain attack types,
particularly during TCP amplification attacks.  No response means
that IP stacks send yet another SYN, then another, then another.
The number depends on the IP stack in use.

Thanks,
Rob.
-- 
Rob Thomas
http://www.cymru.com
ASSERT(coffee != empty);



Current thread: