[nsp-sec] UDP port 2001 attack

[Mike Tancsa]

On 10/3/2013 5:10 PM, Smith, Donald wrote:
> Mike what is your confidence level that this wasn't spoofed (given that it is udp).

Hi Donald, relatively confident.  The packets that came in my private
peers make sense that they came in there and not my other transit links

e.g. in addition to the one I quoted in the original email, I checked
205.164.22.2, 76.74.229.78, 81.17.19.149 and 64.62.157.190.  They too
came in just via my Torix.net peers which makes sense.  If they were
spoofed, I would imagine I would also see them coming in links that dont
make as much sense.

	---Mike



-- 
-------------------
Mike Tancsa, tel +1 519 651 3400
Sentex Communications, mike at sentex.net
Providing Internet services since 1994 www.sentex.net
Cambridge, Ontario Canada   http://www.tancsa.com/