Questions tagged [ddos]
For questions about DDoS denial-of-service attack (DoS attack), which can make a machine or network resource unavailable to its users by temporarily or indefinitely disrupting services of a host connected to the Internet. Use this tag in relation to troubleshooting DDoS attacks.
14
questions
0
votes
1
answer
90
views
a highly sophisticated and persistent DDoS attack
i had ddos attack
i used wireshark to analyzes packets on entery point (ethernet interface) i found packets incoming on:
mac protocol=800 (ip)
protocol=17 (udp)
src-address=(diffirent ips from the ...
0
votes
1
answer
447
views
What are unusual ports?
I found the unusual ports at 2 places, maybe one has got the idea from the other without acknowledging it.
Hi,
I am trying to understand mismatch port application. I am reading the article:
https://...
- 105
0
votes
1
answer
83
views
Can QUIC prevent DNS/NTP amplification for DDOS
According to Cloudflare's article dedicated to QUIC - subtitle Deflecting Reflection implies that QUIC may prevent tampering IP packets. Doest it meat that QUIC may kill DNS/NTP amplification for DDOS ...
- 115
2
votes
2
answers
77
views
Why does IKEv2 forbid dynamic address updates for hosts behind NAT?
In RFC7296, Section 2.23 it is written:
There are cases where a NAT box decides to remove mappings that are
still alive (for example, the keepalive interval is too long, or the
NAT box is rebooted). ....
- 123
0
votes
1
answer
50
views
router-alert feature in DDoS prevention - MX series
I'm reading DDoS Prevention in MX series - 2nd. As mentioned in book "you can also configure whether an individual policer type should bypass that group’s aggregate policer"
=> I don't ...
0
votes
1
answer
85
views
Are routers doing NATP possibly run out of ports?
NATP helps each connection on the client device gain a "temporary identity" on the internet, by maintaining a one-to-one relationship between its local ip-port to a WAN ip-port. The binding ...
- 15
1
vote
1
answer
88
views
How to Mitigate DoS by Bindings/Transport Address Exhaustion in NAT64?
Let's say a NAT64 Router only has 1 IPv4 address for bindings, meaning the NAT64 router has a roughly 65535 IPv4 transport addresses. A malicious attacker can then exhaust the entire IPv4 transport ...
- 27
4
votes
2
answers
987
views
RE Protection vs DDOS Protection in Juniper MX series routers
Hi Everyone,
Need to know the clear differences between RE protection and DDOS protection in Juniper MX. Both are used to save routing engine from depletion of resources. As mentioned in Juniper MX ...
- 1,110
0
votes
1
answer
86
views
Can a random person flood my IP address with excessive amount of garbage packets?
After studying networking for some time, I just realize that the Layer 3 and Layer 2 don't care about the content of the packets they forward. All they care is the header, and further processing of ...
- 423
0
votes
1
answer
82
views
Does CSMA/CA have anti-DoS measures, and if yes which?
So as far as i understand, you can deny other devices access to a WiFi by flooding the channel they are on with data, so that the channel is never "idle", thus preventing other devices from using it - ...
- 163
0
votes
1
answer
115
views
Can I be DDoS-ed without any listening/responding IP address (UDP/TCP/ICMP)?
I'm asking this question because all if not most literature out there indicates that there is a listening or responding entity that is involved in an attack.
If I was behind a router that does not ...
- 206
3
votes
2
answers
129
views
Stop Memcrashed amplification DDoS attack
DDoS is essential part of my life so i am back with more question, Yes we started getting memcache based UDP amplification attacks, all source ports are 11211 coming from many random source IPs, we ...
- 4,371
1
vote
2
answers
506
views
Is a networking loop considered a DoS attack?
Is a networking loop considered a DoS attack?
I watched this tutorial and at 1:20:
The author says that a network loop, could be a DoS in a network?
- 1,747
2
votes
1
answer
319
views
Can i implement BGP flowspec
This question is for general information about BGP flowspec, Can i implement BGP flowspec to stop DDoS? RTBH isn't what we want because it blackholing all traffic, we want RTBH at Layer 4 level where ...
- 4,371