How to Launch a 65Gbps DDoS, and How to Stop One
Who are these irresponsible network operators that allow spoofed source addresses out of their network?  The only way to make a reflection attack like this work is to make the responses go back to the victim.  For that to happen, it has to look like they generated the request.Remember smurf?  Spoof-ping a broadcast address for a multiplication effect.  It's from 1997 or so.  15 years later and we're still living with that kind of problem.http://en.wikipedia.org/wiki/Smurf_attack