Re: Large DDoS, small extortion

[Roland Dobbins <rdobbins () arbor net>]

On May 22, 2014, at 11:51 AM, Beleaguered Admin <dealing.with.ddos () gmail com> wrote:

> While we are interested in technical means to mitigate the attacks (the syn and syn/acks are brutal, all cores pegged 
> on multicore 10G nic servers just dealing with interrupts),

Here's how to get started:

<http://mailman.nanog.org/pipermail/nanog/2010-January/016747.html>

Ensure you have flow telemetry enabled at all your edges; there are open-source tools like nfsen/nfdump that you can 
get started with quickly.

----------------------------------------------------------------------
Roland Dobbins <rdobbins () arbor net> // <http://www.arbornetworks.com>

                   Equo ne credite, Teucri.

                          -- Laocoön