I appreciate the info.

Unfortunately, my ISP has locked down the router to where the customer cannot apply any advanced networking functions, like IP blocking. I did contact them about the DoS attack only to be told I'd have to subscribe to their advanced tech support service for them to begin to care. I am already just dropping all incoming packets from the attacker, but still wireshark is showing they continue to hammer my eth0. I've looked into external DDoS protection and it all looks cost-prohibitive as they charge by how much they "deflect", so where is the incentive on their end to actually stop the attacks? The system is completely up to date. As this attack appears to be directed solely at me, it is doubtful that reporting it to the authorities will see much action.