The Attack Against
Yahoo’s peering routers were not throttling icmp traffic
Facts about the attack(from a yahoo public release):
“the initial flood of packets, which we later realized was in excess of 1G bits/sec, took down one of our routers.”
“on one of the traces we got, this is exactly what it looks like. the destination ip was 255.255.255.255 and the source was us.”
“it seems that this is definitely a DDoS attack, with attacker(s) been smart and above your average script kiddie. attacker(s) probably know both unix and networking (cisco, etc) pretty well and learn about site topology to find weak spots.”