Arch Linux AUR package repository is being DDoSed

8 pointsposted 6 hours ago
by lenova
(status.archlinux.org)

4 Comments

Bender

4 hours ago

What is the total size of the AUR repo? It's tempting to host a mirror if that's an option just to study the traffic. If not it would be nifty if they could run

    tcpdump -i any -p --dont-verify-checksums -NNnnvvv -s0 -B131072 -c10000 proto 6 and port 80 and tcp[13] == 2
assuming its port 80 and then strip out the IP addresses and share what that looks like. Bonus if they could capture a few of the known DDoS IP's and exclude the legit traffic. Curious if one of these things is not like the other. DDoS tools are often written by lazy people and rarely are they maintained.

margarina72

6 hours ago

what is wrong with people? why someone would go through the hassle of doing this... beyond me...