On 4/06/2004, at 2:02 PM, Rob Thomas wrote:

Hi, team.

We are happy to at last release some documentation on Darknets and the Team Cymru Darknet Project. You will find the details at the following URL:

http://www.cymru.com/Darknet/

We hope this helps you to gain greater insight into your networks and the flows on them. Comments, feedback, and coffee are always welcome! :)

I notice that you recommend allocating space for a 'Darknet'. I'm (slowly) setting one up at the moment for our entire address blocks, so as to catch all 'unallocated' space. I intend to throw something together to take into account the number of addresses in our 'Darknet' when entering data into rrdtool, etc. so that as we allocate and recover addresses our stats don't change wildly. Also, Linux now has 'blackhole' routing, and has done for some time. See the output of 'ip route help', you can specify the TYPE as 'blackhole'. The Quagga routing protocol suite (and perhaps zebra?) has limited support for this. -- Nathan Ward