[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Tracking the DNS amplification attacks (was: isprime DOS in progress)

Subject: Tracking the DNS amplification attacks (was: isprime DOS in progress)
From: chort at smtps.net (Brian Keefer)
Date: Sun, 25 Jan 2009 01:22:51 -0800
In-reply-to: <!&!AAAAAAAAAAAuAAAAAAAAAKTyXRN5/+lGvU59a+P7CFMBAN6gY+ZG84BMpVQcAbDh1IQAAAATbSgAABAAAADKmUdbrpmRTrsB82N9UjfvAQAAAAA=@iname.com>
References: <[email protected]> <[email protected]> <[email protected]> <[email protected]> <[email protected]> <C035DD0A88EFF241A24578B7B8D5B505013F4538@intranet.mail.hostingshop.com.au> <[email protected]> <[email protected]> <[email protected]> <!&!AAAAAAAAAAAuAAAAAAAAAKTyXRN5/+lGvU59a+P7CFMBAN6gY+ZG84BMpVQcAbDh1IQAAAATbSgAABAAAADKmUdbrpmRTrsB82N9UjfvAQAAAAA=@iname.com>

On Jan 24, 2009, at 7:00 PM, Frank Bulk wrote:
>
> -----Original Message-----
> From: Brian Keefer [mailto:chort at smtps.net]
>
> Caveat:  my PERL is _terrible_.
>
> http://www.smtps.net/pub/dns-amp-watch.pl
>
> I would not recommend sucking in your dns log into array, rather,  
> read line
> by line and iterate over the file, line by line.
>
> Frank


Yep, you're absolutely right.  I copied that bit from another script  
without thinking.

It's fixed now, along with the logic error on an empty array.  Thanks  
for the feedback.

--
bk

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 1613 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20090125/f4199e97/attachment.bin>

References:
- Any ATT DNS admins out there?
  - From: mike.lyon at gmail.com (Mike Lyon)
- isprime DOS in progress
  - From: nanog at email.fries.net (Todd T. Fries)
- isprime DOS in progress
  - From: graeme at graemef.net (Graeme Fowler)
- isprime DOS in progress
  - From: bjorn at mork.no (Bjørn Mork)
- isprime DOS in progress
  - From: pr at isprime.com (Phil Rosenthal)
- isprime DOS in progress
  - From: stevel at dedicatedservers.net.au (Steven Lisson)
- isprime DOS in progress
  - From: luke at sheldrick.co.uk (Luke Sheldrick)
- isprime DOS in progress
  - From: chort at smtps.net (Brian Keefer)
- Tracking the DNS amplification attacks (was: isprime DOS in progress)
  - From: chort at smtps.net (Brian Keefer)
- Tracking the DNS amplification attacks (was: isprime DOS in progress)
  - From: frnkblk at iname.com (Frank Bulk)

Prev by Date: Are we really this helpless? (Re: isprime DOS in progress)
Next by Date: Tracking the DNS amplification attacks (was: isprime DOS in progress)
Previous by thread: Tracking the DNS amplification attacks (was: isprime DOS in progress)
Next by thread: Tracking the DNS amplification attacks (was: isprime DOS in progress)
Index(es):
- Date
- Thread