ClanKiller.com
https://forums.plasmasky.com/

Anti flood
https://forums.plasmasky.com/viewtopic.php?f=8&t=1538
Page 1 of 1

Author:  RB [ Thu Dec 01, 2005 11:26 am ]
Post subject:  Anti flood

I am sorry that I allways come up with the queistions and give the answers rarely but I could not find nothing of help on web. Recently, some bastard got a fun to flood me, and seemly, I cannot do anything about it. :shock: I don't know even how to know his/hers IP (MAC would be the great discovery too) and how to block it in order to elude throughput lowerance. Anyone able to help?

Author:  derf [ Thu Dec 01, 2005 11:29 am ]
Post subject: 

I dont know what 'flood' is.

Nor do i know how to obtain someone elses IP or MAC.

Sorry.

If its a convensional flood however, you could try just living on your roof and shooting at helicopters?

Author:  Arathorn [ Thu Dec 01, 2005 11:40 am ]
Post subject: 

If it's e-mail, a simple message to your e-mail provider would probably do the trick.

Author:  RB [ Thu Dec 01, 2005 11:55 am ]
Post subject: 

Nope, Arathorn... IP flood. And it is 256kbps already. And about roof and shooting... lol, maybe I consider it if I find the actors :P For you derF - http://project-iris.net/irisbib/papers/ ... /paper.pdf

Author:  Satis [ Thu Dec 01, 2005 11:54 pm ]
Post subject: 

ip flood? like DOS of tcp syn packets or something?

Easiest way would be to install a packet capture tool, like etheral (or packetyzer, which is ethereal with a better frontend). http://packetyzer.com I believe.

Once you get it installed and functional, just start sniffing packets on your network card. The originating IP address is contained in the header of every IP packet...of course, the ip could be spoofed and randomly change, in which case that information is pointless. But most people are idiots and don't know how to spoof their ip headers.

Once you have the ip, you can do a reverse-lookup on it and figure out who their provider is. It's even possible to figure out where they're physically located at, too, thanks to naming conventions of intermediate routers. That's kinda hit and miss, but possible.

Given the provider, you have someone to complain to. Other than complaining to the ISP (or counter hacking), you don't have much recourse after that, though.

Page 1 of 1 All times are UTC - 6 hours
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
http://www.phpbb.com/