23 Oct
2002
23 Oct
'02
10:52 a.m.
On Wed, 23 Oct 2002, Greg Pendergrass wrote:
There has been a lot about what did not happen yesterday, but how about some details about what did happen? Was it a ping flood, syn-flood, smurf, or some combination of types? Were the zombie machines windows, linux, or both? Some of the root servers were affected more than others, why? Was it that there was more ddos traffic directed at them, or that they had less hardware and network resources?
And, calling a recent thread to attention: were the packets from valid sources or were they spoofed, and if so, what was the source address distribution like?