Page 15 - Cyber Warnings
P. 15






































Lo and behold, there is indeed DDoS traffic coming from multiple countries, including the U.S.,
Japan, Russia, Sweden, China, Taiwan, Brazil, and Estonia. Good to know.


Characterizing The Attack



Next we want to know specifically what type of traffic we’re seeing and what that tells us. We’ll
group the traffic coming from all those source host IPs by protocol.































Clearly, this is UDP-based attack. Now we’ll look at the destination port(s).


15 Cyber Warnings E-Magazine – August 2016 Edition
Copyright © Cyber Defense Magazine, All rights reserved worldwide

   10   11   12   13   14   15   16   17   18   19   20