On Mar 26, 2013, at 7:07 PM, Patrick W. Gilmore wrote: > To be more clear, the point of DNS reflection attacks is to amplify the > amount of bandwidth the botnet can muster (and perhaps hide the true source).
Yes, hence the 'amplification' part. ;> More than hiding the actual sources, I think it's more about making it difficult (at first blush) for folks to seine out and filter the attack traffic from the normal 'background radiation' of legitimate traffic. > And far too many other things. :( Good point - game servers, etc. ----------------------------------------------------------------------- Roland Dobbins <rdobb...@arbor.net> // <http://www.arbornetworks.com> Luck is the residue of opportunity and design. -- John Milton