smurf

• attacker sends many ping request packets:

  • from forged (victim) source address
  • to broadcast address on “amplifier” network

• many ping responses from systems on amplifier network

• attacker on dialup modem can saturate victim’s T1 using a T3-connected amplifier

• http://users.quadrunner.com/chuegen/smurf/