Home page logo
/

nanog logo nanog mailing list archives

Tracking the DNS amplification attacks (was: isprime DOS in progress)
From: Brian Keefer <chort () smtps net>
Date: Sat, 24 Jan 2009 16:50:24 -0800

Caveat:  my PERL is _terrible_.

http://www.smtps.net/pub/dns-amp-watch.pl

This assumes you're using BIND. My logs roll on the hour, so I run it from cron at 1 minute before the hour. Depending on how long it takes to process your logs, you might need to tweak.

--
bk
CA cert:  http://www.smtps.net/pub/smtps-dot-net-ca-2.pem

Attachment: smime.p7s
Description:


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]