Smurf attacks
RAL was hit recently (bad network performance!)
‘Ping’ to ip broadcast address
- one packet in, many nodes respond to...
- spoof reply-to address, an innocent ‘victim’
See ICMP traffic on US/UK line
‘denial of service’ to both intermediate and end
http://www.ja.net/CERT/CIAC/i-fy98/i-021.smurf.ip. denial.of.service.attack.txt
block these in ip-routers