Re: Looking for an Akamai contact, strange DoS traffic sourcing from Akamai sources

2011-01-21 Thread Jack Bates
On 1/21/2011 9:48 AM, Patrick W. Gilmore wrote: The issue has been reported to the proper people inside Akamai. They are investigating, we are not ignoring the issue. I agree. Akamai NOC is always great to work with. Jack

Re: Looking for an Akamai contact, strange DoS traffic sourcing from Akamai sources

2011-01-21 Thread Patrick W. Gilmore
The issue has been reported to the proper people inside Akamai. They are investigating, we are not ignoring the issue. If any network with on-net Akamai servers has an issue, including this or any other, please e-mail netsupport-...@akamai.com and that will open a ticket with our Network Suppo

Re: Looking for an Akamai contact, strange DoS traffic sourcing from Akamai sources

2011-01-21 Thread Jack Bates
On 1/21/2011 8:38 AM, Tom Beecher wrote: Jack- This is exactly what we're seeing. The Akamai server starts a retransmission flood aimed at a specific address randomly. We're seeing thousands of retransmissions of the same packet over and over again, same sequence/ack numbers, all 1460 bytes. In

Re: Looking for an Akamai contact, strange DoS traffic sourcing from Akamai sources

2011-01-21 Thread Tom Beecher
Jack- This is exactly what we're seeing. The Akamai server starts a retransmission flood aimed at a specific address randomly. We're seeing thousands of retransmissions of the same packet over and over again, same sequence/ack numbers, all 1460 bytes. In the last capture I have, it was all JP

Re: Looking for an Akamai contact, strange DoS traffic sourcing from Akamai sources

2011-01-21 Thread Chris Adams
Once upon a time, Jack Bates said: > I have a customer reporting the same thing. The traffic flood goes to > offline modem bank IPs. So far, Akamai hasn't actually grasped what the > problem is and says everything is fine. :( me too I hadn't captured the traffic during one of the floods yet, b

Re: Looking for an Akamai contact, strange DoS traffic sourcing from Akamai sources

2011-01-21 Thread Jack Bates
I have a customer reporting the same thing. The traffic flood goes to offline modem bank IPs. So far, Akamai hasn't actually grasped what the problem is and says everything is fine. :( Luckily, most of the traffic (not all) is coming from my local cluster, so it's easier to monitor what's goin

Re: Looking for an Akamai contact, strange DoS traffic sourcing from Akamai sources

2011-01-20 Thread Tom Beecher
I've received a couple of responses off list, and am now in touch with Akamai directly. I appreciate everyone's assistance. On 1/20/2011 4:04 PM, Tom Beecher wrote: I'm looking for an Akamai contact to try and address a strange situation. We have multiple sites across the country that aggrega