Help - Search - Members - Calendar
Full Version: DOS Notifications
The Planet Forums > System Administration > Network
Anarch42
Has anyone ever received notification that The Planet was responding to a DOS attack which could cause some sluggishness on your server? I'm getting drops on packets of around 1028 bytes at what appears to be The Planet's border router with TW Telecom. This is really starting to get frustrating. It is starting to happen more and more often, and the last time I reported it, I was told it was a DOS attack that was being handled at the time.
markcausa
I can't say I've ever received notification relating to a DOS attack. sad.gif Hope it ends soon and you can go about normally.
Tomy Durden
There are various DOS/DDOS attacks going on just about all the time. Our NOC would be more busy creating notifications than handling them. There's really no viable way to do this.
newexpos
QUOTE (Tomy Durden @ Apr 25 2008, 02:11 AM) *
There are various DOS/DDOS attacks going on just about all the time. Our NOC would be more busy creating notifications than handling them. There's really no viable way to do this.


Hmmm

I have to be missing something in that logic.

It is should take one tech that doesn't have to be from the NOC a minute to sent out a mass form letter message similar too

"We are current experiencing a DDOS at the Houston Center. if you are experiencing packet loss...."

and later on

"The DDOS has been handled. If you are still experiencing issues, please contact support"


How many techs does it tie up to answer all the trouble tickets and phone calls from customers asking if you are having network problems?
James Jhurani
QUOTE (newexpos @ Apr 26 2008, 08:08 AM) *
Hmmm

I have to be missing something in that logic.

It is should take one tech that doesn't have to be from the NOC a minute to sent out a mass form letter message similar too

"We are current experiencing a DDOS at the Houston Center. if you are experiencing packet loss...."

and later on

"The DDOS has been handled. If you are still experiencing issues, please contact support"
How many techs does it tie up to answer all the trouble tickets and phone calls from customers asking if you are having network problems?


I have to agree with Tomy on this one.

It wouldn't be a mass form, it would only be sent to those affected. It would take time to gather their account information, then open tickets under each account.
While sending it to _everyone_ and stating "it only affects people who route through 1.2.3.4" sounds like a good idea, that would scare the less experienced individuals into calling for clarification, which would in turn make it counter productive.
markcausa
Although I find myself needing to stay informed more, as time progresses, I have to agree with James on this one.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.