I logged into my router the other day and noticed my connection count up from 100 to about 3000 connections
so I started up tcpdump on my router which I then saved and loaded up into wireshark and saw this......
kept watching in wireshark for about and hour and the attack did not stop phoned up SHAW
they did not know what this was or how to stop it, finally after 4 hours I phoned up SHAW BUISNESS
they looked into it and it finally slowed down to about 1200 connections
Link to a full wireshark pcap file can be found here CloudShark or if you have wireshark I have attached the pcap