From owner-freebsd-questions  Mon Jul 10 17:12:27 2000
Delivered-To: freebsd-questions@freebsd.org
Received: from state.net (dorthy.state.net [204.75.238.244])
	by hub.freebsd.org (Postfix) with ESMTP id 275BF37B614
	for <freebsd-questions@freebsd.org>; Mon, 10 Jul 2000 17:10:20 -0700 (PDT)
	(envelope-from jon@state.net)
Received: from state.net (redoak.state.net [204.75.238.247]) by state.net (8.8.8/8.7.2) with ESMTP id TAA01299 for <freebsd-questions@freebsd.org>; Mon, 10 Jul 2000 19:09:12 -0500 (CDT)
Message-ID: <396A6549.6E41CF3A@state.net>
Date: Mon, 10 Jul 2000 19:07:37 -0500
From: Jon <jon@state.net>
X-Mailer: Mozilla 4.73 [en] (WinNT; U)
X-Accept-Language: en
MIME-Version: 1.0
To: freebsd-questions@freebsd.org
Subject: OT: DDOS / DOS w/ Protocol numbers
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

Hello All,

We were being DDOS'd by two machines just recently, and I noticed that
they were using variable protocol numbers (ie: 8-15) from the same IP
addresses.  Has anyone noticed this?  The attack was just pushing a
lot of data down the pipe, btw.

Jon


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message