DPI or Flow Management

Mon Mar 2 01:17:47 UTC 2009

On Mar 2, 2009, at 9:10 AM, Roland Dobbins wrote:

> With regards to DDoS mitigation, it's sometimes necessary to go  
> above layers-3/-4 in the event of layer-7-targeted attacks.

In fact, it's sometimes important to have the ability to parse packet  
payloads and/or interact with traffic in some layer-3/layer-4 attacks,  
depending upon the type of traffic, source distribution, legitimate  
proxy intermediaries, spoofed vs. non-spoofed, and so forth.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins at cisco.com> // +852.9133.2844 mobile

   Some things are just too precious to entrust to computers.

		   -- Seth Hanford