Home page logo

nanog logo nanog mailing list archives

Re: Slow and Fast IP addresses on http ?
From: Rob Thomas <robt () cymru com>
Date: Tue, 17 Jun 2003 12:34:28 -0500 (CDT)

Hi, NANOGers.

] I'm not defending the practice, I'm defending myself against the
] practitioners.

Indeed.  This can also be a problem during certain attack types,
particularly during TCP amplification attacks.  No response means
that IP stacks send yet another SYN, then another, then another.
The number depends on the IP stack in use.

Rob Thomas
ASSERT(coffee != empty);

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]