[Techtalk] Weird http leeches

[Rosie Nelson]

I am really tired, so hopefully I'm getting this right..

This sounds a whole lot like what happened surrounding the DRDOS attack 
against Steve Gibson at grc.com this past January. If you haven't seen 
it, check out his page about it:
http://grc.com/dos/drdos.htm

I am not knowledgable about such things so I am not very helpful, but I 
did remember that and thought I would pass it along. It's an interesting 
read, for anyone that hasn't read it already. Now back to studying for me..


Rosie


Dave North wrote:

>I have lots of questions. For example, what the heck is going on? Could
>all our acks "flood" the poor spoofed IPs (making them the targe?) Anybody
>else hear anything about this? If you check any servers you can access, do
>you see similar traffic?
>	Etcetera. I'm fascinated by this puzzle, and I have some strange
>urge to get to the bottom of it. I also wouldn't mind contributing to some
>effort to nail the perp, if I could.
>  
>