--- 2000/ed000008.txt	Fri Aug 25 13:01:07 2000
+++ 2001/ed010005.txt	Thu Dec 27 13:56:35 2001
@@ -1,12 +1,13 @@
 -----BEGIN PGP SIGNED MESSAGE-----
 
 ======================================================================
-                                                   JPCERT-ED-2000-0008
+                                                   JPCERT-ED-2001-0005
                                                              JPCERT/CC
 $B5;=Q%a%b(B - $B%5!<%S%91?MQK832967b$KBP$9$kKI1R(B
 
-$B=i(B  $BHG(B: 2000-02-28 (Ver.01: JPCERT-ED-2000-0002)
-$BH/9TF|(B:	2000-08-25 (Ver.02)
+$B=i(B    $BHG(B: 2000-02-28 (Ver.01: JPCERT-ED-2000-0002)
+$BH/(B $B9T(B $BF|(B: 2001-12-27 (Ver.03)
+$B:G?7>pJs(B: http://www.jpcert.or.jp/ed/2001/ed010005.txt
 ======================================================================
 
   $BK\J8=q$G$O!"%5!<%S%91?MQK832(B (denial of service, DoS) $B967b$,$I$N$h$&(B
@@ -19,9 +20,7 @@
 $B$5$l$F$$$k2DMQ@-$,B;$J$o$l$k$3$H$r8@$$$^$9!#(B
 
   - $B%M%C%H%o!<%/$NmUmT(B
-
-  - $B%7%9%F%`%j%=!<%9(B (CPU$B;~4V!"%P%C%U%!NN0h!"5-21NN0h!"%5%W%i%$IJEy(B)
-    $B$N@jM-(B
+    ($B%[%9%HKt$O%M%C%H%o!<%/$X$N%"%/%;%9$N=8Cf$K$h$k%M%C%H%o!<%/$N:.;((B)
 
   - $B%7%9%F%`$N%/%i%C%7%e(B
 
@@ -55,6 +54,12 @@
 $BMQK832$K$D$$$F$O!"967b$NCf7QCOE@$H$7$F(B c) d) e) $B$N$h$&$K0-MQ$5$l$J$$$h(B
 $B$&!"3F%5%$%H$,B-JB$_$rB7$($k$3$H$b=EMW$H$J$C$F$-$^$9!#(B
 
+$B$^$?!"(BOS $B$N%M%C%H%o!<%/%5!<%S%9%W%m%0%i%`$N4{CN$N<eE@$r0-MQ$7$F46@w!&(B
+$BA}?#$9$k%o!<%`$N46@w$N;n$_$K$h$j!"%M%C%H%o!<%/BS0h$,BgI}$K>CHq$5$l!"7k(B
+$B2L$H$7$F!"%M%C%H%o!<%/$,(B DoS $B967b$r<u$1$?>uBV$K$J$k%1!<%9$b$"$j$^$9!#(B
+$B$3$N$h$&$J%o!<%`$N1F6A$r:G>.8B$K$9$k$?$a$K$O!"2<5-(B II.(1) $B%=%U%H%&%'%"(B
+$B$N99?7(B $B$r>o$K?43]$1!"%o!<%`$N46@w3HBg$rKI$0$3$H$bMW5a$5$l$^$9!#(B
+
 
 II. $BBP:v(B
 
@@ -88,13 +93,13 @@
 $B%5%$%H$N%k!<%?$N@_Dj$r3NG'$7!"%G%#%l%/%F%#%I%V%m!<%I%-%c%9%H$K4X$9$k=h(B
 $BM}$rL58z2=$7$^$9(B ($B%Q%1%C%H%U%#%k%?%j%s%0$K$h$jBP=h$9$kA*Br;h$b$"$j$^$9(B)$B!#(B
 
-  $B%G%#%l%/%F%#%I%V%m!<%I%-%c%9%H$H$O!"08@h%M%C%H%o!<%/$N30It$+$i!"08@h(B
-$B%M%C%H%o!<%/$X$N%V%m!<%I%-%c%9%H$r9T$J$&$3$H$r0UL#$7$^$9!#(BRFC 1812 [1]
-($B$b$7$/$O!"$=$l0JA0$N(B RFC) $B$N5,Dj$K$h$j!"EAE}E*$J%k!<%?$G$O!"%k!<%?$,(B
-$BD>@\@\B3$5$l$F$$$k%M%C%H%o!<%/$K08$F$?%G%#%l%/%F%#%I%V%m!<%I%-%c%9%H$r(B
-$B<u$1$k$H!"86B'$H$7$F$=$l$r=hM}$9$k(B ($B2<0LAX$N%V%m!<%I%-%c%9%H5!G=$rMQ$$(B
-$B$FAw?.$9$k(B) $B$h$&$K<BAu$5$l$F$$$^$9!#$7$+$7$J$,$i!"$3$N=hM}$K$O(B Smurf
-$B$N$h$&$J%j%9%/$rH<$J$$$^$9!#(B
+  $B%G%#%l%/%F%#%I%V%m!<%I%-%c%9%H$H$O!"%k!<%?$J$I$N5!4o$,!"<+%M%C%H%o!<(B
+$B%/30It$+$i$N%Q%1%C%H$r!"<+%M%C%H%o!<%/FbIt$N%V%m!<%I%-%c%9%H%"%I%l%9$X(B
+$BE>Aw$9$k$3$H$r0UL#$7$^$9!#(BRFC 1812 [1] ($B$b$7$/$O!"$=$l0JA0$N(B RFC) $B$N5,(B
+$BDj$K$h$j!"EAE}E*$J%k!<%?$G$O!"%k!<%?$,D>@\@\B3$5$l$F$$$k%M%C%H%o!<%/$K(B
+$B08$F$?%G%#%l%/%F%#%I%V%m!<%I%-%c%9%H$r<u$1$k$H!"86B'$H$7$F$=$l$r=hM}$9(B
+$B$k(B ($B2<0LAX$N%V%m!<%I%-%c%9%H5!G=$rMQ$$$FAw?.$9$k(B) $B$h$&$K<BAu$5$l$F$$$^(B
+$B$9!#$7$+$7$J$,$i!"$3$N=hM}$K$O(B Smurf $B$N$h$&$J%j%9%/$rH<$J$$$^$9!#(B
 
   1999$BG/(B8$B7n$K$O!"(B[1] $B$r99?7$9$k(B RFC 2644 [3] $B$,8x3+$5$l!"%k!<%?$KBP$7(B
 $B$F$O!"%f!<%6$,L@<(E*$K@_Dj$7$J$$8B$j(B ($B%f!<%6$,L@<(E*$K%j%9%/$r<h$i$J$$(B
@@ -133,10 +138,27 @@
 
 (7) $B%Q%1%C%H$N%U%#%k%?%j%s%0(B
 
-  (3) (4) $B$G5s$2$?%U%#%k%?%j%s%0$NB>$K$b!"303&$+$i%5%$%HFbIt$X$N%Q%1%C(B
-$B%H$r%U%#%k%?%j%s%0$7!"B>$N@x:_E*$J967b$r2sHr$9$k$3$H$d!"FbIt$+$i303&$X(B
-$B$N%Q%1%C%H$r%U%#%k%?%j%s%0$7!"967b$NCf7QCOE@$H$7$F$N0-MQ$r$h$j:$Fq$K$7(B
-$B$F$*$/$3$H$,9M$($i$l$^$9!#(B
+  (3) (4) $B$G5s$2$?<+%5%$%H$N%"%I%l%9$K$D$$$F$N%U%#%k%?%j%s%0$NB>$K$b!"(B
+$B303&$+$i<+%5%$%HFbIt$X$N%Q%1%C%H$r%U%#%k%?%j%s%0$7!"B>$N@x:_E*$J967b$r(B
+$B2sHr$9$k$3$H$d!"<+%5%$%HFbIt$+$i303&$X$N%Q%1%C%H$r%U%#%k%?%j%s%0$7!"96(B
+$B7b$NCf7QCOE@$H$7$F$N0-MQ$r$h$j:$Fq$K$7$F$*$/$3$H$,9M$($i$l$^$9!#(B
+
+  $BNc$($P!"0J2<$N%M%C%H%o!<%/%"%I%l%9$O%5%$%HFbIt$G$N$_;HMQ$5$l$k%"%I%l(B
+$B%9$G$"$j!"DL>o%M%C%H%o!<%/$r1[$($F;HMQ$5$l$k$3$H$O$"$j$^$;$s!#$3$l$i%M%C(B
+$B%H%o!<%/$+$i$N%Q%1%C%H$,Aw=P$5$l$J$$$h$&$K%"%/%;%9@)8f$r9T$&$3$H$b%5%$(B
+$B%H$N0-MQ$rKI$0BP:v$N0l$D$G$9(B[15]$B!#(B
+
+ 0.0.0.0/8           - Historical Broadcast
+ 10.0.0.0/8          - RFC 1918 Private Network
+ 127.0.0.0/8         - Loopback
+ 169.254.0.0/16      - Link Local Networks
+ 172.16.0.0/12       - RFC 1918 Private Network
+ 192.0.2.0/24        - TEST-NET
+ 192.168.0.0/16      - RFC 1918 Private Network
+ 224.0.0.0/4         - Class D Multicast
+ 240.0.0.0/5         - Class E Reserved
+ 248.0.0.0/5         - Unallocated
+ 255.255.255.255/32  - Broadcast
 
   $BM}O@E*$K$O!"(B($BAPJ}8~$K$*$$$F(B) $B%5%$%H$N%5!<%S%9$KI,MW$J%Q%1%C%H$@$1$r(B
 $BDL2a$5$;!"B>$O$9$Y$FGK4~$9$k$3$H$,9M$($i$l$^$9!#$7$+$7!"<B:]$N%7%9%F%`(B
@@ -193,28 +215,32 @@
 
 V. $B;29M;qNA(B
 
-($BCm(B) [8] $B!A(B [14] $B$K$D$$$F$OK\J8$+$i$N;2>H$O$"$j$^$;$s$,!"6qBNE*$J967b(B
-$B$NNc$H$7$F$"$o$;$F$4;2>H$/$@$5$$!#(B
+($BCm(B) [8]$B!A(B[14][16][17] $B$K$D$$$F$OK\J8$+$i$N;2>H$O$"$j$^$;$s$,!"6qBNE*(B
+$B$J967b$NNc$H$7$F$"$o$;$F$4;2>H$/$@$5$$!#(B
 
 [1] "Requirements for IP Version 4 Routers", RFC 1812, F. Baker
 
+    http:/www.ietf.org/rfc/rfc1812.txt
+
 [2] CA-98.01.smurf
 
-    http://www.cert.org/advisories/CA-98.01.smurf.html
+    http://www.cert.org/advisories/CA-1998-01.html
 
 [3] "Changing the Default for Directed Broadcasts in Routers", RFC 2644,
     D. Senie
 
+    http:/www.ietf.org/rfc/rfc2644.txt
+
 [4] CA-96.01.UDP_service_denial
 
-    http://www.cert.org/advisories/CA-96.01.UDP_service_denial.html
+    http://www.cert.org/advisories/CA-1996-01.html
 
   ($BF|K\8lLu(B)
     http://www.jpcert.or.jp/tr/cert_advisories/CA-96.01.txt
 
 [5] CA-97.28.Teardrop_Land
 
-    http://www.cert.org/advisories/CA-97.28.Teardrop_Land.html
+    http://www.cert.org/advisories/CA-1997-28.html
 
 [6] $B%3%s%T%e!<%?%;%-%e%j%F%#%$%s%7%G%s%H$X$NBP1~(B
 
@@ -224,25 +250,27 @@
     which employ IP Source Address Spoofing", RFC 2267, P. Ferguson,
     D. Senie
 
+    http:/www.ietf.org/rfc/rfc2267.txt
+
 [8] Denial of Service Attacks
 
     http://www.cert.org/tech_tips/denial_of_service.html
 
 [9] CA-96.21.tcp_syn_flooding
 
-    http://www.cert.org/advisories/CA-96.21.tcp_syn_flooding.html
+    http://www.cert.org/advisories/CA-1996-21.html
 
 [10] CA-96.26.ping
 
-    http://www.cert.org/advisories/CA-96.26.ping.html
+    http://www.cert.org/advisories/CA-1996-26.html
 
 [11] CA-98-13 tcp denial of service
 
-    http://www.cert.org/advisories/CA-98-13-tcp-denial-of-service.html
+    http://www.cert.org/advisories/CA-1998-13.html
 
 [12] CA-99-17 Denial-of-Service Tools
 
-    http://www.cert.org/advisories/CA-99-17-denial-of-service-tools.html
+    http://www.cert.org/advisories/CA-1999-17.html
 
 [13] CA-2000-01 Denial-of-Service Developments
 
@@ -252,7 +280,17 @@
 
     http://www.cert.org/incident_notes/IN-99-07.html
 
+[15] Help Defeat Denial of Service Attacks: Step-by-Step
+
+    http://www.sans.org/dosstep/
+
+[16] Trends in Denial of Service Attack Technology
+
+    http://www.cert.org/archive/pdf/DoS_trends.pdf
+
+[17] Results of the Distributed-Systems Intruder Tools Workshop
 
+    http://www.cert.org/reports/dsit_workshop-final.html
 __________
 
 $BCm(B: JPCERT/CC $B$N3hF0$O!"FCDj$N8D?M$dAH?%$NMx1W$rJ]>c$9$k$3$H$rL\E*$H$7(B
@@ -273,7 +311,7 @@
 
 __________
 
-2000 (C) JPCERT/CC
+2000-2001 (C) JPCERT/CC
 
   $B$3$NJ8=q$rE>:\$9$k:]$K$O!"A4J8$rE>:\$7$F$/$@$5$$!#>pJs$O99?7$5$l$F$$(B
 $B$k2DG=@-$,$"$j$^$9$N$G!":G?7>pJs$K$D$$$F$O(B
@@ -291,15 +329,18 @@
 
 $B2~D{MzNr(B
 
+2001-12-27  $B;2>H(B URL $B5Z$SJ8LL$N99?7!"DI2C(B
+            $B%U%!%$%kL>JQ99(B
 2000-08-25  $B;2>H(B URL $B$N99?7(B
 2000-02-28  $B=iHG(B (JPCERT-ED-2000-0002)
 
 -----BEGIN PGP SIGNATURE-----
 Version: 2.6.3ia
+Charset: noconv
 
-iQCVAwUBOaXvfox1ay4slNTtAQGZCgQAiNWMlvzdO3ENaNO8T2+jirGkW0zAjQ2N
-0OrW6pT66thCXy0hiYwrFPVUIFMZen2PHCTcuuilyZE8xlYgaUXrxtWfIBg4hwCV
-7d7fXnoebniv9nCvgSe9+4GY/tlt9x7EmriqS0dJZpE1Sm3s8vWnq1OgTO0FqSv1
-YUHQqrbfr5U=
-=Ncpk
+iQCVAwUBPCqINYx1ay4slNTtAQGBSgP+Ob2uUxrCvR2bNDs2BnyNSSlP13bHav9X
+aWpfEsqTN0ViYg4MbsBg2bdAvZjQElssAH1Nf3ItECXgFACbZEBArCxDxxogmliz
+sxpb+/ubZstdzIVbFLbl38POu5yBkGTS2TcWhWZY6bjbrHlOzrf/6ZTiw6Q+OsZ8
+7BXJzglw9wE=
+=MDJi
 -----END PGP SIGNATURE-----
