Right. Well that's how I read it too. And just to make sure this thread
is indeed operations related, I'll make the following points:
1. Send a Cisco enough (a thousand a second) ICMP ECHO REQUESTS, and
it takes CPU to 99% and drops all BGP sessions. Tested on a C7010.
2. Various routers on MAE-East have been mysteriously clearing all their
BGP peers over the past week or two.
3. The attack mentioned causes a lot of ICMP ECHO REQUESTS to be sent
to Cisco routers on MAE-East.
Are these facts by any chance related? I think we should be told. Or,
urm, find out. On with that logging ACL.
Alex Bligh
Xara Networks