[nsp-sec] search by asn

[John Kristoff]

On Mon, 1 Apr 2013 23:23:02 +0100 (BST)
"James A. T. Rice" <james_r-nsp at jump.org.uk> wrote:

> We have a bunch of gaming server customers who regularly get DoSsed
> via DNS Amplification, I could contribute the traffic stats / netflow
> data / pcap data from the attacks if that's at all useful. Maybe
> others could do some of the above too? The badness of a given host
> could be normalised and used to give an aggregate score.

I'm game for helping put this together.  I think being able to alert
people based on their level of participation in an attack, will be a
big motivator for many as Gabe says.

I'll touch base with you off line.  Anyone else who is interested in
contributing, please give us a poke.

John