[time] DDos attacks(maybe)?

[Steve Woodford]

On Thursday 07 October 2004 20:43, root at borgnet.us wrote:
> Well I have been watching the hits here for my server and I seeing
> just normal traffic with only 56 bytes for each request which is
> normal.
>
> If it was a true DDos the bytes for each request would be much higher
> like 1024 bytes.

I've just checked the Trends link at http://isc.sans.org/. Guess what? 
Port 123 is top of the list.

Cheers, Steve