[atlas] Spoofing measurenments

Nick Hilliard wrote on 23/11/15 13:11:
> On 23/11/2015 12:03, Daniel Karrenberg wrote:
>> Why exactly do we need to know the exact amount of this problem?
> 
> it would be useful to know the sources of the problem.
> 

Agree. It is also important to be able to track the overall trend. Stats
on volumetric DDoS attacks are not a good indicator, since they depend
on other factors like number and amplification capabilities of
reflectors and botnet parameters.

I doubt that without good measurements and traceability we can
effectively address this problem.

Having said that I do not think Atlas can really help. Atlas can only
offer a fraction of devices that can effectively spoof (although I heard
that not every NAT device prevents spoofing for any IP range). And its
deployment is not uniform, so the results won't be more statistically
representative than those from Spoofer (http://spoofer.caida.org/).

Sigh...

Andrei