Ping flooding (fwd)
Per Gregers Bilse
bilse at EU.net
Wed Jul 10 00:13:35 UTC 1996
On Jul 9, 19:15, Curtis Villamizar <curtis at ans.net> wrote:
> I have always been under the impression that Cisco flow switching and
> high performance were mutually exclusive if there were too many active
> flows as is the case for the major US ISPs at least.
This may or may not be the case, but that wasn't the question; the
question was if information required to track bogus packets was
Apart from that, flow switching should probably be seen in the
light of distributed switching, but all of this is something
sales critters are there to talk about.
> Another difference is with the flow switching, you need to catch them
> in the act. With the sampling and collection, you can call hours
> later (days or weeks actually, years if you count going to tape) and
> still determine the candidate entry points for the traffic. I don't
> think there is a practical way to get the same sort of historic
> archive from the flow switching stats.
As noted in other mail, it appears there is a solution to that.
------ ___ --- Per G. Bilse, Mgr Network Operations Ctr
----- / / / __ ___ _/_ ---- EUnet Communications Services B.V.
---- /--- / / / / /__/ / ----- Singel 540, 1017 AZ Amsterdam, NL
--- /___ /__/ / / /__ / ------ tel: +31 20 6233803, fax: +31 20 6224657
--- ------- 24hr emergency number: +31 20 421 0865
--- Connecting Europe since 1982 --- http://www.EU.net e-mail: bilse at EU.net
More information about the NANOG