FortiDDos DDoS Attack Mitigation Guide - Fortinet

Attacks to test functionality and performance
Spoofed UDP attack
This is a spoofed flood in which the protocol is UDP and source address keeps
changing.
Spoofed ICMP attack
This is a spoofed flood in which the protocol is ICMP and source address keeps
changing.
Spoofed TCP SYN-ACK attack
This is a spoofed TCP flood in which SYN-ACK packets are sent in an anomalous state
manner. Connections are not established prior to this through a SYN packet.
Spoofed TCP FIN-ACK attack
This is a spoofed TCP flood in which FIN-ACK packets are sent in an anomalous state
manner. Connections are not established prior to this through a SYN packet.
Spoofed IP attack
This is a spoofed IP protocol flood. Packets may not necessarily be TCP, UDP or ICMP
and can be any protocol.
Spoofed IP fragments attack
This is a spoofed IP flood in which packets are fragmented - the fragment bit is set in
the layer-3 IP header.
IP-UDP fragments attack
This is a IP flood in which packets are fragmented - the fragment bit is set in the layer-
3 IP header and packets belong to protocol 17 (UDP).
IP-ICMP fragments attack
This is a IP flood in which packets are fragmented - the fragment bit is set in the layer-
3 IP header and packets belong to protocol 1 (ICMP).
TCP/UDP destination port attack
This is a layer 4 flood in which packets attack either a TCP or UDP destination port.
FortiDDoS DDoS Attack Mitigation Guide
28-100-167076-20120501 28
http://docs.fortinet.com/ • Feedback