On Mon, Jan 29, 2001 at 11:34:10AM -0500, Valdis.Kletnieks@vt.edu wrote:
On Mon, 29 Jan 2001 08:16:27 PST, Sean Capshaw <scapshaw@yahoo.com> said:
of the bulk of that ICMP traffic, then change your filters to discard ICMP to the host under attack while in parallel notify the NOC of the source or intermediary involved
*attempt* to notify the NOC....
Oh, I never had problems notifying NOCs... getting them to *do* something or call someone is the trick. I can't remember which large ISP it was that told me that the only way I'd be connected to their network was if I was a customer with a customer number. "i don't think so" -- John Payne http://www.sackheads.org/jpayne/ john@sackheads.org http://www.sackheads.org/uce/ Fax: +44 870 0547954 To send me mail, use the address in the From: header