DoS attack capture

[Carter Bullard]

Hey Chris,
   That would be great.  Just one to start would be
fine, to start.  The real question is what are the
primary characteristics? Same host? Same port? 
Same TCP flags?  That kind of thing.

ftp://qosient.com/incoming is the place to put the
files.  Thanks!!

Carter

Carter Bullard
QoSient, LLC
300 E. 56th Street, Suite 18K
New York, New York  10022

carter at qosient.com
Phone +1 212 588-9133
Fax   +1 212 588-9134
http://qosient.com


> -----Original Message-----
> From: owner-argus-info at lists.andrew.cmu.edu 
> [mailto:owner-argus-info at lists.andrew.cmu.edu] On Behalf Of 
> Chris Newton
> Sent: Monday, June 25, 2001 9:04 PM
> To: Argus (argus-info); Carter Bullard
> Subject: RE: DoS attack capture
> 
> 
> Hi Carter,
> 
>   I have a *whole* *whack* of em :)  I could put a bunch up 
> for FTP for you, 
> which is likely the easiest... since, they hit upwards of 
> 38MB in size for a 
> 30 second time period.  How many would you want?  I have 
> dozens and dozens of 
> 30 second long files with content like you would like to see.
> 
> Chris
> 
> >===== Original Message From "Carter Bullard" 
> <carter at qosient.com> ===== 
> >Gentle people,
> >   Does anyone have an argus capture of a DoS
> >attack, that they would not mind sharing?  If you've
> >got such a beast, but you would like to anonymize the
> >data, this is a good time for me to write ranonymous().
> >
> >Thanks for the attention,
> >
> >Carter
> >
> >Carter Bullard
> >QoSient, LLC
> >300 E. 56th Street, Suite 18K
> >New York, New York  10022
> >
> >carter at qosient.com
> >Phone +1 212 588-9133
> >Fax   +1 212 588-9134
> >http://qosient.com
> 
> _/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/
> 
> Chris Newton, Systems Analyst
> Computing Services, University of New Brunswick
> newton at unb.ca 506-447-3212(voice) 506-453-3590(fax)
> 
> "The best way to have a good idea is to have a lot of ideas." 
> Linus Pauling (1901 - 1994) US chemist
> 
>