New Tool for DDoS Defense

From: Simple Nomad (thegnomeat_private)
Date: Tue Feb 15 2000 - 13:40:52 PST

Next message: Kragen Sitaker: "Re: CGI.pm and the untrusted-URL problem"

Previous message: Steven M. Bellovin: "Re: Misleading sense of security in Netscape"
Next in thread: David Brumley: "Re: New Tool for DDoS Defense"
Reply: David Brumley: "Re: New Tool for DDoS Defense"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

I've written a tool for remotely telling ddos zombies to stop flooding.
Most detectors out there will not detect during a flood (due to the
traffic involved), so I thought trying to turn the flood off might be kind
of nice. Like the detectors, it assumes default settings on the ddos
daemons. Works against Trinoo, TFN, and Stacheldraht.

Go to http://razor.bindview.com/ and follow the links to Zombie Zapper,
unix and NT versions available with source code.

-         Simple Nomad          -  No rest for the Wicca'd  -
-      thegnomeat_private        -        www.nmrc.org       -
-  thegnomeat_private  -     razor.bindview.com    -

Next message: Kragen Sitaker: "Re: CGI.pm and the untrusted-URL problem"
Previous message: Steven M. Bellovin: "Re: Misleading sense of security in Netscape"
Next in thread: David Brumley: "Re: New Tool for DDoS Defense"
Reply: David Brumley: "Re: New Tool for DDoS Defense"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 15:35:03 PDT