[nsp-sec] DoS Attack against Level3

[Janish, Nathan]

Thanks for looking Stephen!

Nate

-----Original Message-----
From: Stephen Fromm [mailto:stephenf at nero.net] 
Sent: Thursday, July 21, 2011 9:46 AM
To: Janish, Nathan
Cc: 'NSP-SEC List'
Subject: Re: [nsp-sec] DoS Attack against Level3

Very little via as3701 to those destinations:

Date flow start          Duration Proto      Src IP Addr:Port          Dst IP Addr:Port   Flags Tos  Packets    Bytes Flows
2011-07-21 08:00:24.639     0.000 UDP      128.193.15.12:61719 ->     206.33.57.51:53    ......   0       10      740     1
2011-07-21 08:15:42.683     0.000 UDP     140.211.127.88:25935 ->    205.128.90.51:53    ......   0       10      830     1
2011-07-21 08:36:15.646     0.000 UDP      128.193.15.12:21410 ->    205.128.70.51:53    ......   0       10      830     1
Summary: total flows: 3, total bytes: 2400, total packets: 30, avg bps: 8, avg pps: 0, avg bpp: 80
Time window: 2011-07-21 07:54:48 - 2011-07-21 08:44:49
Total flows processed: 7128916, Blocks skipped: 0, Bytes read: 541804504


-- 
Stephen Fromm
Network for Education and Research in Oregon
University of Oregon