[AusNOG] census issues tonight

[James Braunegg]

Absolutely… that’s why I said it could have been a TCP low level none flood style attack, which again would be very hard to prove  other than looking at packets per second instead of total throughput.

Kindest Regards

James Braunegg
P:  1300 769 972  |  M:  0488 997 207 |  D:  (03) 9751 7616
E:   james.braunegg at micron21.com<mailto:james.braunegg at micron21.com>  |  ABN:  12 109 977 666
W:  www.micron21.com/ddos-protection<http://www.micron21.com/ddos-protection>   T: @micron21

Follow us on Twitter<http://www.twitter.com/micron21> for important service and system updates.

[M21.jpg]

This message is intended for the addressee named above. It may contain privileged or confidential information. If you are not the intended recipient of this message you must not use, copy, distribute or disclose it to anyone other than the addressee. If you have received this message in error please return the message to the sender by replying to it and then delete the message from your computer.

From: Scott Howard [mailto:scott at doc.net.au]
Sent: Wednesday, 10 August 2016 10:22 AM
To: James Braunegg <james.braunegg at micron21.com>
Cc: andy at coastalaudio.com.au; Nathan Brookfield <Nathan.Brookfield at simtronic.com.au>; James Hodgkinson <yaleman at ricetek.net>; Tim Raphael <raphael.timothy at gmail.com>; ausnog at lists.ausnog.net
Subject: Re: [AusNOG] census issues tonight

On Tue, Aug 9, 2016 at 5:03 PM, James Braunegg <james.braunegg at micron21.com<mailto:james.braunegg at micron21.com>> wrote:
If you look on public peering exchanges around the world for an abnormal increase of traffic during last night, you don’t see any such increase, nor any evidence.

I.e. When CloudFlare reported a large 300gbit+ scale NTP reflection attack back in 2014 peering’s graphs around the world showed a spike in traffic.

You are presuming a network-based DDoS.  Application-level (D)DoS's are often much simpler to do, and will not result in a visible increase in traffic.

  Scott
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20160810/4b8b5437/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 2683 bytes
Desc: image001.jpg
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20160810/4b8b5437/attachment.jpg>