Tracing forged packets

• Start on router near victim

• Find how packets get to that router

• Repeat on next router

• Continue until edge of your AS

• Ask next AS to trace further

• Need cooperation

• IMPORTANT - Should have a 24hour security contact!