# how long was the site down? **URL:** \ **Category:** PittSpeed Off Topic\ **Created:** [June 1, 2004, 6:42pm UTC](https://forums.speedlife.net/t/how-long-was-the-site-down/166872 "2004-06-01T18:42:04Z")\ **Posts on this page:** 18\ **Page:** 1
**Author:** ![whitey](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/whitey/32/5911_2.png) [@whitey](https://forums.speedlife.net/u/whitey)\ **Post date:** [June 1, 2004, 6:42pm UTC](https://forums.speedlife.net/t/how-long-was-the-site-down/166872/1 "2004-06-01T18:42:04Z")
i didn’t even know… ---
**Author:** ![Pewter](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/pewter/32/5936_2.png) [@Pewter](https://forums.speedlife.net/u/Pewter)\ **Post date:** [June 1, 2004, 6:44pm UTC](https://forums.speedlife.net/t/how-long-was-the-site-down/166872/2 "2004-06-01T18:44:00Z")
since about 6 or 6.30 ---
**Author:** ![whitey](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/whitey/32/5911_2.png) [@whitey](https://forums.speedlife.net/u/whitey)\ **Post date:** [June 1, 2004, 6:51pm UTC](https://forums.speedlife.net/t/how-long-was-the-site-down/166872/3 "2004-06-01T18:51:38Z")
hmmm ---
**Author:** ![fshowcars](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/fshowcars/32/5937_2.png) [@fshowcars](https://forums.speedlife.net/u/fshowcars)\ **Post date:** [June 1, 2004, 6:53pm UTC](https://forums.speedlife.net/t/how-long-was-the-site-down/166872/4 "2004-06-01T18:53:03Z")
really??? didn’t notice ---
**Author:** ![thefranchise](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/thefranchise/32/5951_2.png) [@thefranchise](https://forums.speedlife.net/u/thefranchise)\ **Post date:** [June 1, 2004, 6:54pm UTC](https://forums.speedlife.net/t/how-long-was-the-site-down/166872/5 "2004-06-01T18:54:09Z")
some members prob went into shock ---
**Author:** ![VictorSmalls](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/victorsmalls/32/5944_2.png) [@VictorSmalls](https://forums.speedlife.net/u/VictorSmalls)\ **Post date:** [June 1, 2004, 6:56pm UTC](https://forums.speedlife.net/t/how-long-was-the-site-down/166872/6 "2004-06-01T18:56:57Z")
i was sitting on the floor of my room crying ☹ ---
**Author:** ![Darkstar](https://avatars.discourse-cdn.com/v4/letter/d/b487fb/32.png) [@Darkstar](https://forums.speedlife.net/u/Darkstar)\ **Post date:** [June 1, 2004, 7:00pm UTC](https://forums.speedlife.net/t/how-long-was-the-site-down/166872/7 "2004-06-01T19:00:14Z")
> [@thefranchise](#): > > some members prob went into shock :embarassd ---
**Author:** ![whitey](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/whitey/32/5911_2.png) [@whitey](https://forums.speedlife.net/u/whitey)\ **Post date:** [June 1, 2004, 7:04pm UTC](https://forums.speedlife.net/t/how-long-was-the-site-down/166872/8 "2004-06-01T19:04:28Z")
going to check the logs now… lets see if anyone was trying to be cool and trying a DOS ---
**Author:** ![tjZ28](https://avatars.discourse-cdn.com/v4/letter/t/9de0a6/32.png) [@tjZ28](https://forums.speedlife.net/u/tjZ28)\ **Post date:** [June 1, 2004, 7:57pm UTC](https://forums.speedlife.net/t/how-long-was-the-site-down/166872/9 "2004-06-01T19:57:09Z")
> [@whitey](#): > > going to check the logs now… lets see if anyone was trying to be cool and trying a DOS That’d be my guess. It’d still connect every now and again, but when it did it was really slow. Most of the time just no connection. -TJ ---
**Author:** ![Darkstar](https://avatars.discourse-cdn.com/v4/letter/d/b487fb/32.png) [@Darkstar](https://forums.speedlife.net/u/Darkstar)\ **Post date:** [June 1, 2004, 8:06pm UTC](https://forums.speedlife.net/t/how-long-was-the-site-down/166872/10 "2004-06-01T20:06:34Z")
> [@whitey](#): > > going to check the logs now… lets see if anyone was trying to be cool and trying a DOS DOS? ---
**Author:** ![Black\_WS6](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/black_ws6/32/5952_2.png) [@Black\_WS6](https://forums.speedlife.net/u/Black_WS6)\ **Post date:** [June 1, 2004, 8:46pm UTC](https://forums.speedlife.net/t/how-long-was-the-site-down/166872/11 "2004-06-01T20:46:31Z")
> [@Darkstar](#): > > DOS? you know DAWWWWWWWS. 😃 Denial of service. It’s a webpage hack that basically shuts down a site by bombarding it with hits. ---
**Author:** ![VictorSmalls](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/victorsmalls/32/5944_2.png) [@VictorSmalls](https://forums.speedlife.net/u/VictorSmalls)\ **Post date:** [June 1, 2004, 9:00pm UTC](https://forums.speedlife.net/t/how-long-was-the-site-down/166872/12 "2004-06-01T21:00:14Z")
> [@Black\_WS6](#): > > you know DAWWWWWWWS. 😃 > > Denial of service. It’s a webpage hack that basically shuts down a site by bombarding it with hits. Signature Material 🙂 ---
**Author:** ![Logik](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/logik/32/5941_2.png) [@Logik](https://forums.speedlife.net/u/Logik)\ **Post date:** [June 1, 2004, 9:03pm UTC](https://forums.speedlife.net/t/how-long-was-the-site-down/166872/13 "2004-06-01T21:03:03Z")
> [@Black\_WS6](#): > > you know DAWWWWWWWS. 😃 > > Denial of service. It’s a webpage hack that basically shuts down a site by bombarding it with hits. kinda, not really. ---
**Author:** ![Black\_WS6](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/black_ws6/32/5952_2.png) [@Black\_WS6](https://forums.speedlife.net/u/Black_WS6)\ **Post date:** [June 1, 2004, 9:21pm UTC](https://forums.speedlife.net/t/how-long-was-the-site-down/166872/14 "2004-06-01T21:21:34Z")
> [@Logik](#): > > kinda, not really. Web stuff is not my specialty, but I was close. :hs: ---
**Author:** ![Darkstar](https://avatars.discourse-cdn.com/v4/letter/d/b487fb/32.png) [@Darkstar](https://forums.speedlife.net/u/Darkstar)\ **Post date:** [June 1, 2004, 10:02pm UTC](https://forums.speedlife.net/t/how-long-was-the-site-down/166872/15 "2004-06-01T22:02:26Z")
> [@Black\_WS6](#): > > you know DAWWWWWWWS. 😃 > > Denial of service. It’s a webpage hack that basically shuts down a site by bombarding it with hits. ahhh, gotcha. :doh: ---
**Author:** ![bobby311](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/bobby311/32/5971_2.png) [@bobby311](https://forums.speedlife.net/u/bobby311)\ **Post date:** [June 1, 2004, 10:53pm UTC](https://forums.speedlife.net/t/how-long-was-the-site-down/166872/16 "2004-06-01T22:53:06Z")
Description This document provides a general overview of attacks in which the primary goal of the attack is to deny the victim(s) access to a particular resource. Included is information that may help you respond to such an attack. A “denial-of-service” attack is characterized by an explicit attempt by attackers to prevent legitimate users of a service from using that service. Examples include attempts to “flood” a network, thereby preventing legitimate network traffic attempts to disrupt connections between two machines, thereby preventing access to a service attempts to prevent a particular individual from accessing a service attempts to disrupt service to a specific system or person Not all service outages, even those that result from malicious activity, are necessarily denial-of-service attacks. Other types of attack may include a denial of service as a component, but the denial of service may be part of a larger attack. Illegitimate use of resources may also result in denial of service. For example, an intruder may use your anonymous ftp area as a place to store illegal copies of commercial software, consuming disk space and generating network traffic Impact Denial-of-service attacks can essentially disable your computer or your network. Depending on the nature of your enterprise, this can effectively disable your organization. Some denial-of-service attacks can be executed with limited resources against a large, sophisticated site. This type of attack is sometimes called an “asymmetric attack.” For example, an attacker with an old PC and a slow modem may be able to disable much faster and more sophisticated machines or networks. MODES OF ATTACK Denial-of-service attacks come in a variety of forms and aim at a variety of services. There are three basic types of attack: consumption of scarce, limited, or non-renewable resources destruction or alteration of configuration information physical destruction or alteration of network components Consumption of Scarce Resources Computers and networks need certain things to operate: network bandwidth, memory and disk space, CPU time, data structures, access to other computers and networks, and certain environmental resources such as power, cool air, or even water. Network Connectivity Denial-of-service attacks are most frequently executed against network connectivity. The goal is to prevent hosts or networks from communicating on the network. An example of this type of attack is the “SYN flood” attack described in [http://www.cert.org/advisories/CA-1996-21.html](http://www.cert.org/advisories/CA-1996-21.html) In this type of attack, the attacker begins the process of establishing a connection to the victim machine, but does it in such a way as to prevent the ultimate completion of the connection. In the meantime, the victim machine has reserved one of a limited number of data structures required to complete the impending connection. The result is that legitimate connections are denied while the victim machine is waiting to complete bogus “half-open” connections. You should note that this type of attack does not depend on the attacker being able to consume your network bandwidth. In this case, the intruder is consuming kernel data structures involved in establishing a network connection. The implication is that an intruder can execute this attack from a dial-up connection against a machine on a very fast network. (This is a good example of an asymmetric attack.) Using Your Own Resources Against You An intruder can also use your own resources against you in unexpected ways. One example is described in [http://www.cert.org/advisories/CA-1996-01.html](http://www.cert.org/advisories/CA-1996-01.html) In this attack, the intruder uses forged UDP packets to connect the echo service on one machine to the chargen service on another machine. The result is that the two services consume all available network bandwidth between them. Thus, the network connectivity for all machines on the same networks as either of the targeted machines may be affected. Bandwidth Consumption An intruder may also be able to consume all the available bandwidth on your network by generating a large number of packets directed to your network. Typically, these packets are ICMP ECHO packets, but in principle they may be anything. Further, the intruder need not be operating from a single machine; he may be able to coordinate or co-opt several machines on different networks to achieve the same effect. ---
**Author:** ![Pewter](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/pewter/32/5936_2.png) [@Pewter](https://forums.speedlife.net/u/Pewter)\ **Post date:** [June 2, 2004, 3:33am UTC](https://forums.speedlife.net/t/how-long-was-the-site-down/166872/17 "2004-06-02T03:33:42Z")
i had to call 911! ---
**Author:** ![2QWIK2C](https://avatars.discourse-cdn.com/v4/letter/2/8dc957/32.png) [@2QWIK2C](https://forums.speedlife.net/u/2QWIK2C)\ **Post date:** [June 4, 2004, 3:17am UTC](https://forums.speedlife.net/t/how-long-was-the-site-down/166872/18 "2004-06-04T03:17:55Z")
> [@cracka](#): > > Description > This document provides a general overview of attacks in which the primary goal of the attack is to deny the victim(s) access to a particular resource. Included is information that may help you respond to such an attack. > > A “denial-of-service” attack is characterized by an explicit attempt by attackers to prevent legitimate users of a service from using that service. Examples include > > attempts to “flood” a network, thereby preventing legitimate network traffic > attempts to disrupt connections between two machines, thereby preventing access to a service > attempts to prevent a particular individual from accessing a service > attempts to disrupt service to a specific system or person > > Not all service outages, even those that result from malicious activity, are necessarily denial-of-service attacks. Other types of attack may include a denial of service as a component, but the denial of service may be part of a larger attack. > > Illegitimate use of resources may also result in denial of service. For example, an intruder may use your anonymous ftp area as a place to store illegal copies of commercial software, consuming disk space and generating network traffic > > Impact > Denial-of-service attacks can essentially disable your computer or your network. Depending on the nature of your enterprise, this can effectively disable your organization. > > Some denial-of-service attacks can be executed with limited resources against a large, sophisticated site. This type of attack is sometimes called an “asymmetric attack.” For example, an attacker with an old PC and a slow modem may be able to disable much faster and more sophisticated machines or networks. > > MODES OF ATTACK > Denial-of-service attacks come in a variety of forms and aim at a variety of services. There are three basic types of attack: > > consumption of scarce, limited, or non-renewable resources > destruction or alteration of configuration information > physical destruction or alteration of network components > > Consumption of Scarce Resources > Computers and networks need certain things to operate: network bandwidth, memory and disk space, CPU time, data structures, access to other computers and networks, and certain environmental resources such as power, cool air, or even water. > > Network Connectivity > Denial-of-service attacks are most frequently executed against network connectivity. The goal is to prevent hosts or networks from communicating on the network. An example of this type of attack is the “SYN flood” attack described in > > [http://www.cert.org/advisories/CA-1996-21.html](http://www.cert.org/advisories/CA-1996-21.html) > In this type of attack, the attacker begins the process of establishing a connection to the victim machine, but does it in such a way as to prevent the ultimate completion of the connection. In the meantime, the victim machine has reserved one of a limited number of data structures required to complete the impending connection. The result is that legitimate connections are denied while the victim machine is waiting to complete bogus “half-open” connections. > > You should note that this type of attack does not depend on the attacker being able to consume your network bandwidth. In this case, the intruder is consuming kernel data structures involved in establishing a network connection. The implication is that an intruder can execute this attack from a dial-up connection against a machine on a very fast network. (This is a good example of an asymmetric attack.) > > Using Your Own Resources Against You > An intruder can also use your own resources against you in unexpected ways. One example is described in > > [1996 CERT Advisories](http://www.cert.org/advisories/CA-1996-01.html) > In this attack, the intruder uses forged UDP packets to connect the echo service on one machine to the chargen service on another machine. The result is that the two services consume all available network bandwidth between them. Thus, the network connectivity for all machines on the same networks as either of the targeted machines may be affected. > > Bandwidth Consumption > An intruder may also be able to consume all the available bandwidth on your network by generating a large number of packets directed to your network. Typically, these packets are ICMP ECHO packets, but in principle they may be anything. Further, the intruder need not be operating from a single machine; he may be able to coordinate or co-opt several machines on different networks to achieve the same effect. Funny shit isn’t it?