Merit Network
Can't find what you're looking for? Search the Mail Archives.
  About Merit   Services   Network   Resources & Support   Network Research   News   Events   Home

Discussion Communities: Merit Network Email List Archives

North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: New form of packet attack named Stream

  • From: Paul Vixie
  • Date: Mon Jan 24 14:45:24 2000

A better-late-than-never followup:

jamie@dilbert.exodus.net (Jamie Rishaw) writes:

> Unless you are
> Vixie
> ...
> A major s/w key figure
> or comparable entity
> 
> .. or someone that knows me IRL, and has for some time .. please do not
> e-mail me asking for the code.

I sent Jamie a request, and he sent me the code (thanks!) and I read it and
indeed it's not real different from a lot of other synflooders out there (but
it sure is the cleanest implementation I've seen).

Someone from ISC ran it against F.ROOT-SERVERS.NET for a while, and while the
gross CPU usage went up, the rate of DNS response generation did not change.
Thus we concluded that a 4-CPU Alpha ES40 running Tru64 5.0 is "safe".

--
Paul Vixie <vixie@mibh.net>
SVP for Internet Services, MFNX

M.I.B.H. Inc. is a wholly owned subsidiary of Metromedia Fiber Network, Inc.





Discussion Communities


About Merit | Services | Network | Resources & Support | Network Research
News | Events | Contact | Site Map | Merit Network Home


Merit Network, Inc.