[Pool] DDoS Type Attack

Hal Murray hmurray at megapathdsl.net
Mon Feb 17 08:14:42 UTC 2014

cswiger at mac.com said:
> Sure.  ~10 per minute is the highest rate a normal client using iburst will
> startup as; after that one packet per minute (every 64 seconds, actually) is
> the most rapid polling rate that should be used without prior coordination.

If you are thinking about this area, it's important to note that 10 per 
minute is different from 1 per 6 seconds.  iburst sends a batch of 6 packets 
at 2 second intervals.

How do packet filters compute average packet rate?  (I'll have to go look at 
the code to see how ntpd does it.)

These are my opinions.  I hate spam.

More information about the pool mailing list