On Tue, 26 Sep 2000, Roeland M.J. Meyer <rmeyer@MHSC.com> wrote:
I know that all of you are aware of this. Granted, each subsequently smaller subnet also limits the maximum number of hosts that will respond to the smurf trigger. The point is that, the web-site ONLY tests 0 and
Actually, that's often not the case. Through NAT and other modern marvels, it's possible to have massively overpopulated netblocks that all respond. The largest amplifier we've found yet was 170,000x (on a class C).
the script-kiddees already have a means to do so. Had I the time, I could write the code, the algorithm is trivial.
We've got the code to scan for them, but started with /24. In October or November, we'll probably scan to /27 boundaries. Also, there's now a list of amplifiers, sorted by ASN, rechecked and updated nightly. It's linked off the main netscan.org page. Cheers, Troy