<div dir="ltr">another beer<div class="gmail_extra"><br clear="all"><div><div dir="ltr">------------------------------------------------<br><span style="font-family:arial,sans-serif;font-size:12.7315px;border-collapse:collapse"><font face="Arial"><b>Nick Gale</b></font></span><div>
<div><span style="font-family:arial,sans-serif;font-size:12.7315px;border-collapse:collapse"><font size="4" color="#008000" face="Webdings"><br>P</font><font color="#008000" face="Arial"> Please consider the environment before you print this email.</font> </span></div>
</div></div></div>
<br><br><div class="gmail_quote">On 11 February 2014 13:27, Scott Weeks <span dir="ltr"><<a href="mailto:surfer@mauigateway.com" target="_blank">surfer@mauigateway.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<br>
<br>
--- <a href="mailto:daniel@glovine.com.au">daniel@glovine.com.au</a> wrote:<br>
From: Daniel Watson <<a href="mailto:daniel@glovine.com.au">daniel@glovine.com.au</a>><br>
<br>
<a href="http://www.itnews.com.au/News/372033,worlds-largest-ddos-strikes-us-europe.aspx" target="_blank">http://www.itnews.com.au/News/372033,worlds-largest-ddos-strikes-us-europe.aspx</a><br>
---------------------------------------<br>
<br>
It's well past beer o'clock here, so my math or logic may not be<br>
optimally functioning...  ;-)<br>
<br>
"For example, 100Mbps of spoofed NTP traffic can cause 5.8Gbps of<br>
malicious traffic to strike the spoofed target," the report read."<br>
<br>
"CloudFlare chief executive Matthew Prince said the attack tipped<br>
400Gbps"<br>
<br>
400G / 5.8G = 69<br>
<br>
69 * 100Mbps = 6.9Gbps<br>
<br>
So someone is using 6.9Gbps of bandwidth just for an NTP attack?<br>
<br>
Or are the spoofed packets coming from bots and that bandwidth is<br>
spread across a lot of different pipes?<br>
<br>
Or do I need another beer?  :-)<br>
<span class="HOEnZb"><font color="#888888"><br>
scott<br>
</font></span><div class="HOEnZb"><div class="h5"><br>
<br>
<br>
<br>
<br>
_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
<br>
<br>
_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
</div></div></blockquote></div><br></div></div>