> Knowing his IP address is useless, if it's a denial of service, > unless you have a peering agreement with his NSP/ISP, and/or are > within driving distance, and own a shotgun.
That is what I'm talking about. :) And I think that the attaker lives not so far from him, since you need to have very good Inet to send thousands pps. > > BTW, what were the UDP packets for? Scanning? > Otherwise, they might have been a Linux NFS over UDP client > (same thing, really), or some other attack (e.g. attempted DNS > poisoning, etc.). no - he says that the packets are sent to random ports So, watch and try to get the real IP 8) 07.01.2003; 19:42:31 [SorAlx] http://cydem.zp.ua/ To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-hackers" in the body of the message