Gameserver port. The attack appearing to come from hundreds of IPs means nothing as it's trivial to spoof the source IP with UDP.
On 27 January 2011 11:12, PryMaL <pry...@geekout.info> wrote: > On 27/01/2011 8:25 PM, Arie wrote: > >> These recent attacks all work by overloading the server with UDP packets. >> Most effective are the A2S_INFO and similar attacks using valid packets. >> It's very cheap in terms of CPU and bandwidth to craft a packet that asks >> a >> gameserver for it's information. It takes a number of times more CPU power >> to generate the response. >> It only takes a simple connection with about 3Mbit upstream to take down >> any >> OrangeBox gameserver. >> >> does this form of attack use the game ports? > or just hammer the IP? > > Reason I ask is the attacks appear to be simply hammering many different > ports and coming from hundreds of IP's simultaneously. For all I can see, > it's a DDoS... > > -- > PryMaL > > Email: pry...@geekout.info > Twitter: prymal81 > > > > _______________________________________________ > To unsubscribe, edit your list preferences, or view the list archives, > please visit: > http://list.valvesoftware.com/mailman/listinfo/hlds_linux > _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
