<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Computer Solutions Blog &#187; attack</title>
	<atom:link href="http://www.computersolutions.cn/blog/tag/attack/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.computersolutions.cn/blog</link>
	<description>Whats happening at Computer Solutions</description>
	<lastBuildDate>Thu, 02 Sep 2010 08:07:13 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
		<item>
		<title>Another outage!</title>
		<link>http://www.computersolutions.cn/blog/2009/12/another-outage/?utm_source=rss&amp;utm_medium=rss&amp;utm_campaign=another-outage</link>
		<comments>http://www.computersolutions.cn/blog/2009/12/another-outage/#comments</comments>
		<pubDate>Mon, 07 Dec 2009 15:23:10 +0000</pubDate>
		<dc:creator>Lawrence Sheed</dc:creator>
				<category><![CDATA[Service Issues]]></category>
		<category><![CDATA[Technical Mumbo Jumbo]]></category>
		<category><![CDATA[attack]]></category>
		<category><![CDATA[denial of service]]></category>
		<category><![CDATA[DoS]]></category>
		<category><![CDATA[network]]></category>
		<category><![CDATA[outage]]></category>
		<category><![CDATA[shanghai telecom]]></category>
		<category><![CDATA[traffic logs]]></category>

		<guid isPermaLink="false">http://www.computersolutions.cn/blog/?p=290</guid>
		<description><![CDATA[Seems that when it rains, it pours. The gods were not content to give us only one issue today from an external provider, but two! At approximately 7pm the network that includes our mail server was on got hit by a massive denial of service attack. The nice people at Shanghai Telecom decided that they [...]]]></description>
			<content:encoded><![CDATA[<p>Seems that when it rains, it pours.</p>
<p>The gods were not content to give us only one issue today from an external provider, but two!</p>
<p>At approximately 7pm the network that includes our mail server was on got hit by a massive denial of service attack.<br />
The nice people at Shanghai Telecom decided that they would simply shut off routing for the entire subnet as their optimal solution.</p>
<p>We have a nice graph of that happening here:</p>
<p><a href="http://www.computersolutions.cn/blog/wp-content/uploads/2009/12/net01.day_.png"><img class="size-full wp-image-292 alignnone" title="net01.day" src="http://www.computersolutions.cn/blog/wp-content/uploads/2009/12/net01.day_.png" alt="net01.day" width="547" height="270" /></a></p>
<p>Note the sudden precipitous drop in network traffic starting at approximately 7pm, which lasted until approximately 8pm.</p>
<p>We also have images of the DoS attack [although not completely, as our network was null routed (shut off) for the brunt of the attack]</p>
<p>You can see the sudden increase in incoming traffic in this image below (which occurred before they killed the network completely).<br />
The green line which indicates incoming packets suddenly goes sky high before the network people shut off the network.</p>
<p><a href="http://www.computersolutions.cn/blog/wp-content/uploads/2009/12/net02z.day_.png"><img class="size-full wp-image-293 alignnone" title="net02z.day" src="http://www.computersolutions.cn/blog/wp-content/uploads/2009/12/net02z.day_.png" alt="net02z.day" width="547" height="270" /></a></p>
<p>Some of the other servers also got hit by this &#8211; notable our web servers, although they didn&#8217;t cut those off thankfully.<br />
See below for a view of that traffic.</p>
<p><a href="http://www.computersolutions.cn/blog/wp-content/uploads/2009/12/net02z.88.213.day_.png"><img class="alignnone size-full wp-image-294" title="net02z.88.213.day" src="http://www.computersolutions.cn/blog/wp-content/uploads/2009/12/net02z.88.213.day_.png" alt="net02z.88.213.day" width="547" height="270" /></a></p>
<p>As the old curse goes &#8211; may you live in interesting times.<br />
Some days are more interesting than others!</p>
]]></content:encoded>
			<wfw:commentRss>http://www.computersolutions.cn/blog/2009/12/another-outage/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
