North American Network Operators Group
Date Prev | Date Next |
Date Index |
Thread Index |
Author Index |
Historical
Re: New form of packet attack named Stream
- From: Paul Vixie
- Date: Mon Jan 24 14:45:24 2000
A better-late-than-never followup:
jamie@dilbert.exodus.net (Jamie Rishaw) writes:
> Unless you are
> Vixie
> ...
> A major s/w key figure
> or comparable entity
>
> .. or someone that knows me IRL, and has for some time .. please do not
> e-mail me asking for the code.
I sent Jamie a request, and he sent me the code (thanks!) and I read it and
indeed it's not real different from a lot of other synflooders out there (but
it sure is the cleanest implementation I've seen).
Someone from ISC ran it against F.ROOT-SERVERS.NET for a while, and while the
gross CPU usage went up, the rate of DNS response generation did not change.
Thus we concluded that a 4-CPU Alpha ES40 running Tru64 5.0 is "safe".
--
Paul Vixie <vixie@mibh.net>
SVP for Internet Services, MFNX
M.I.B.H. Inc. is a wholly owned subsidiary of Metromedia Fiber Network, Inc.
|
