Identifying DoS-attacked IP address(es)

Andre Chapuis chapuis at
Mon Dec 16 14:12:15 UTC 2002

How do you identify a DoS-attacked IP address(es) on your ingress border router, assuming the latter is a Cisco 12000 ? I used to use ip accounting but they removed it from the S-code.

Andre Chapuis
IP+ Engineering
Swisscom Ltd
Genfergasse 14
3050 Bern
+41 31 893 89 61
chapuis at
CCIE #6023

More information about the NANOG mailing list