From owner-freebsd-security  Fri Jan 21 15:17:44 2000
Delivered-To: freebsd-security@freebsd.org
Received: from testbed.baileylink.net (testbed.baileylink.net [63.71.213.24])
	by hub.freebsd.org (Postfix) with ESMTP id 9776E1563F
	for <freebsd-security@FreeBSD.ORG>; Fri, 21 Jan 2000 15:17:39 -0800 (PST)
	(envelope-from brad@testbed.baileylink.net)
Received: (from brad@localhost)
	by testbed.baileylink.net (8.9.3/8.9.3) id RAA89017
	for freebsd-security@FreeBSD.ORG; Fri, 21 Jan 2000 17:17:59 -0600 (CST)
	(envelope-from brad)
Date: Fri, 21 Jan 2000 17:17:59 -0600
From: Brad Guillory <round@baileylink.net>
To: freebsd-security@FreeBSD.ORG
Subject: Re: Some observations on stream.c and streamnt.c
Message-ID: <20000121171759.D56672@baileylink.net>
References: <Pine.BSF.4.10.10001211649440.4460-100000@tetron02.tetronsoftware.com> <200001212258.OAA64329@apollo.backplane.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 1.0i
In-Reply-To: <200001212258.OAA64329@apollo.backplane.com>; from dillon@apollo.backplane.com on Fri, Jan 21, 2000 at 02:58:40PM -0800
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

Matt wrote:
> 
>     Ok... but what sort of packet rate is the machine at telepath.com
>     seeing from this attack?
> 
>     Note that a T3 is only 45 MBits.  Attacks on BEST that only went through
>     a single incoming T3 never had much of an effect, it was only those 
>     attacks that came over multiple T3's (generally ping-broadcast attacks)
>     that we worried about.
> 
> 					-Matt

I don't understand how a "script kiddie" is going to garner the bandwidth
to run an attack into the multi-megabit range.  This is not a leveraged
attack (right?).  What kind of packet rate are we talking about to reboot
a system, I understand that this will depend on the equipment, but I am
interested in any numbers that would allow me to evaluate the real impact
that this DOS will have.  Most people that have enough bandwidth to launch
a multi-megabit attack have better things to do than (or is it then) to pick
on me. Thanx all, BMG


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message