there were 0 router logs for this time period when I got ddosed
today opened faf with wireshark, hoping that same thing happens that happened yesterday and I will be able to provide a dump.
but nothing happened, so I guess it really was a targeted DDoS by that guy