This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revisionNext revisionBoth sides next revision | ||
mission:log:2015:03:28:digital-exorcism [2015/03/28 10:45] – [Personal Log: Digital Exorcism] chrono | mission:log:2015:03:28:digital-exorcism [2015/03/28 12:48] – chrono | ||
---|---|---|---|
Line 1: | Line 1: | ||
- | ~~DRAFT~~ | ||
- | |||
====== Personal Log: Digital Exorcism ====== | ====== Personal Log: Digital Exorcism ====== | ||
When you leave the commercial/ | When you leave the commercial/ | ||
- | Yesterday, a couple of friends from the awesome http:// | + | Yesterday, a couple of friends from the awesome http:// |
Since it was supposed to be a DDoS, I've had my input filters clamped too early and saw that something was going on and a lot of traffic was moving but it somehow seemed wrong compared to other DDoS investigations I had to do in the past. After some failed attempts to block/ | Since it was supposed to be a DDoS, I've had my input filters clamped too early and saw that something was going on and a lot of traffic was moving but it somehow seemed wrong compared to other DDoS investigations I had to do in the past. After some failed attempts to block/ | ||
- | {{ : | + | {{ : |
Here's where Dashboards like [[https:// | Here's where Dashboards like [[https:// | ||
- | It then quickly became apparent, that one of the VMs was the top talker so we moved onto that box and what started out as DDoS mitigation turned into digital exorcism. You know, when there are daemons that are possessed by some evil spirit to create some form havoc, mostly | + | It then quickly became apparent, that one of the VMs was the top talker so we moved onto that box and what started out as DDoS mitigation turned into digital exorcism. You know, when there are daemons that are possessed |
===== ===== | ===== ===== |