>> DDoS = multiple IPs >> >> DoS = single IP > >It seems most people colloquially use DDoS for both, and reserve DoS for >magic-packet blocking exploits like the latest BIND CVE, FYI.
Given how easy it still is to put a fake source address in an IP packet, it seems optimistic to assume that just because the packets all have the same return address, they're actually coming from the same place. R's, John
