[nsp-sec] [EXTERNAL] 9001: New UDP amplification port?

[Compton, Rich A]

Looks like I was too late retrieving the raw netflow records and they had already aged out.  Sorry about that. 

On 7/16/21, 1:37 AM, "Borja Marcos" <borjamar at sarenet.es> wrote:

    CAUTION: The e-mail below is from an external source. Please exercise caution before opening attachments, clicking links, or following guidance.


    > On 16 Jul 2021, at 00:05, Compton, Rich A <Rich.Compton at charter.com> wrote:
    > 
    > We saw a spike of less than 1Gbps of traffic.  Pretty low.

    So, similar to ours.

    Out of curiosity, did your packet love come from only a handful of ASNs?

    I had an email today, Ruckus is releasing a security advisory this week.





    Borja.



E-MAIL CONFIDENTIALITY NOTICE: 
The contents of this e-mail message and any attachments are intended solely for the addressee(s) and may contain confidential and/or legally privileged information. If you are not the intended recipient of this message or if this message has been addressed to you in error, please immediately alert the sender by reply e-mail and then delete this message and any attachments. If you are not the intended recipient, you are notified that any use, dissemination, distribution, copying, or storage of this message or any attachment is strictly prohibited.