Re: automatic rtbh trigger using flow data

[Hugo Slabbert <hugo () slabnet com>]

On Fri 2018-Aug-31 13:35:29 -0500, Aaron Gould <aaron1 () gvtc com> wrote:

> * btw, what can you experts tell me about tcp-based volumetric attacks...
> please help me to understand... does tcp have an inherent inability to
> ramp-up to massive speeds/loads with it's sliding window and
> must-rcv-ack-before sending more segments ??  I ask since I heard this years
> ago about tcp and I wonder if this is why

UDP, depending on the application, can be reflected and amplified.  
Generally on the TCP side you can try SYN or ACK floods, but you're not 
going to get an amplified reflection.

--
Hugo Slabbert       | email, xmpp/jabber: hugo () slabnet com
pgp key: B178313E   | also on Signal

Attachment: signature.asc
Description: Digital signature