[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: recursive DNS servers DDoS as a growing DDoS problem

To: "Ventsislav Genchev" <vigour1@xxxxxxxxx>
Subject: Re: recursive DNS servers DDoS as a growing DDoS problem
From: Robert Story <rstory-l@xxxxxxxxxxxxxxxxxxx>
Date: Tue, 14 Mar 2006 06:52:37 -0500

On Tue, 7 Mar 2006 19:26:19 +0200 Ventsislav wrote:
VG> Are you sure about that amplification process??

Yes.

VG> In the scenario you describe, I cannot see any actual amplification...

The amplification isn't in the number of hosts responding, but in packet size.
A very small DNS request packet results in a huge response packet.

Follow-Ups:
- Re: recursive DNS servers DDoS as a growing DDoS problem
  - From: Michael Sierchio

References:
- recursive DNS servers DDoS as a growing DDoS problem
  - From: Gadi Evron
- Re: recursive DNS servers DDoS as a growing DDoS problem
  - From: Ventsislav Genchev

Prev by Date: [SECURITY] [DSA 1006-1] New wzdftpd packages fix arbitrary shell command execution
Next by Date: [SECURITY] [DSA 1008-1] New kpdf packages fix arbitrary code execution
Previous by thread: Re: recursive DNS servers DDoS as a growing DDoS problem
Next by thread: Re: recursive DNS servers DDoS as a growing DDoS problem
Index(es):
- Date
- Thread