Re: IGMP DOS Attack

From: Justin Shore (macdaddyat_private)
Date: Thu Apr 11 2002 - 08:45:56 PDT

  • Next message: Kurt Seifried: "Re: IGMP DOS Attack"

    On 4/11/02 5:45 AM D.Stoutat_private said...
    
    >  Has anybody else had an IGMP DoS attack starting at 5:23 CET ?
    >  Does anybody know what causes this ?
    >  What are the implications of this (other than pure bandwidth 
    >consumption)
    >
    >  I will continue to search for info, but please help me if you know what 
    >this is.
    
    While you might be using multicast on your LAN, are you actually wanting 
    to use that over your WAN link?  Does you upstream support it?  _Very_ 
    few do.  If you're not wanting mcast in or out of your WAN link, block 
    it.  
    
    Justin
    
    
    --
    Justin Shore, ES-SS ES-SSR      Pittsburg State University
    Network & Systems Manager       Kelce 157Q
    Office of Information Systems   Pittsburg, KS 66762
    Voice: (620) 235-4606           Fax: (620) 235-4545
    http://www.pittstate.edu/ois/
    
    Warning:  This message has been quadruple Rot13'ed for your protection.
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Thu Apr 11 2002 - 11:42:02 PDT