am I getting ddosed

asked 2017-12-05 03:35:24 +0000

anonymous user


I do believe that I am getting ddosed but could someone prove it with only this wireshark document that I saved ? I can't post the link so here

edit retag flag offensive close merge delete


To me it doesn't seem like you were DDoSed, rather as if your PC takes part in some peer-to-peer file sharing network.

sindy gravatar imagesindy ( 2017-12-05 09:59:49 +0000 )edit

so with this document I wouldn't be able to prove it to my isp ? I want my ip changed but I need to prove the ddos in order to get it changed

exit gravatar imageexit ( 2017-12-05 14:11:38 +0000 )edit

Definitely not. 4 packets per second is the maximum towards your machine ( which is simply ridiculous. You send more (80 packets per second at peak) than you receive according to this capture, and DDoS would mean as many packets towards you that your uplink line would be clogged with them, which means thousands to hundreds of thousands packets per second with nowadays' line speeds.

So if you do experience some issues, the capture file you have posted doesn't confirm them. However, as the address in the capture is a private one, maybe there really was a DDoS but towards the public address of your router, which does not let the packets through to your PC (as expected unless you've configured some port forwarding or DMZ rule). So you'd have to capture at the internet-facing interface of your router to confirm this and eventually ...(more)

sindy gravatar imagesindy ( 2017-12-05 14:42:30 +0000 )edit