Re: Looking for an Akamai contact, strange DoS traffic sourcing from Akamai sources

2011-01-21 Thread Jack Bates
On 1/21/2011 9:48 AM, Patrick W. Gilmore wrote: The issue has been reported to the proper people inside Akamai. They are investigating, we are not ignoring the issue. I agree. Akamai NOC is always great to work with. Jack

Re: Looking for an Akamai contact, strange DoS traffic sourcing from Akamai sources

2011-01-21 Thread Patrick W. Gilmore
The issue has been reported to the proper people inside Akamai. They are investigating, we are not ignoring the issue. If any network with on-net Akamai servers has an issue, including this or any other, please e-mail netsupport-...@akamai.com and that will open a ticket with our Network Suppo

Re: Looking for an Akamai contact, strange DoS traffic sourcing from Akamai sources

2011-01-21 Thread Jack Bates
On 1/21/2011 8:38 AM, Tom Beecher wrote: Jack- This is exactly what we're seeing. The Akamai server starts a retransmission flood aimed at a specific address randomly. We're seeing thousands of retransmissions of the same packet over and over again, same sequence/ack numbers, all 1460 bytes. In

Re: Looking for an Akamai contact, strange DoS traffic sourcing from Akamai sources

2011-01-21 Thread Tom Beecher
Jack- This is exactly what we're seeing. The Akamai server starts a retransmission flood aimed at a specific address randomly. We're seeing thousands of retransmissions of the same packet over and over again, same sequence/ack numbers, all 1460 bytes. In the last capture I have, it was all JP

Re: Looking for an Akamai contact, strange DoS traffic sourcing from Akamai sources

2011-01-21 Thread Chris Adams
Once upon a time, Jack Bates said: > I have a customer reporting the same thing. The traffic flood goes to > offline modem bank IPs. So far, Akamai hasn't actually grasped what the > problem is and says everything is fine. :( me too I hadn't captured the traffic during one of the floods yet, b

Re: Looking for an Akamai contact, strange DoS traffic sourcing from Akamai sources

2011-01-21 Thread Jack Bates
I have a customer reporting the same thing. The traffic flood goes to offline modem bank IPs. So far, Akamai hasn't actually grasped what the problem is and says everything is fine. :( Luckily, most of the traffic (not all) is coming from my local cluster, so it's easier to monitor what's goin

Re: Looking for an Akamai contact, strange DoS traffic sourcing from Akamai sources

2011-01-20 Thread Tom Beecher
I've received a couple of responses off list, and am now in touch with Akamai directly. I appreciate everyone's assistance. On 1/20/2011 4:04 PM, Tom Beecher wrote: I'm looking for an Akamai contact to try and address a strange situation. We have multiple sites across the country that aggrega

Looking for an Akamai contact, strange DoS traffic sourcing from Akamai sources

2011-01-20 Thread Tom Beecher
I'm looking for an Akamai contact to try and address a strange situation. We have multiple sites across the country that aggregate 56k dialup customers. Different sites are randomly experiencing inbound traffic spikes that are overwhelming the uplinks to our carriers, causing DoS situations.