[nsp-sec] ASN 36351 Softlayer Possible DoS

[Chris Morrow]

On 10/13/2011 11:54 AM, Chris Morrow wrote:
> ----------- nsp-security Confidential --------
> 
> 
> 
> On 10/13/2011 11:41 AM, Tino Steward wrote:
>> ----------- nsp-security Confidential --------
>>
>> Softlayer, 
>> We're seeing the below traffic if you need any assistance.
>> tino
>>
>> 1	67.228.254.4	UDP	53		1945671 pps 	141.528 Mbps
>> 2	67.228.255.5	UDP	53		1912759 pps 	139.196 Mbps
>> 3	67.228.255.5	TCP	53	SYN	1720053 pps 	75.682 Mbps
> 
> is this right? a 43byte syn packet?

apologies my math was off...
75682000/8/1720053 = 5byte packet...
bits/sec / bits/byte / pps

> 
>> 4	67.228.254.4	TCP	53	SYN	1255602 pps 	55.247 Mbps
>>
> 
> 
> _______________________________________________
> nsp-security mailing list
> nsp-security at puck.nether.net
> https://puck.nether.net/mailman/listinfo/nsp-security
> 
> Please do not Forward, CC, or BCC this E-mail outside of the nsp-security
> community. Confidentiality is essential for effective Internet security counter-measures.
> _______________________________________________