Identifying DoS-attacked IP address(es)

Mon Dec 16 16:35:20 UTC 2002

On Mon, 16 Dec 2002, Andre Chapuis wrote:

>
> Hi,
> How do you identify a DoS-attacked IP address(es) on your ingress border router, assuming the latter is a Cisco 12000 ? I used to use ip accounting but they removed it from the S-code.

What info do you have when you are trying to accomplish this mission?

> Thanks,
> André
>
>
> ---------------------
> Andre Chapuis
> IP+ Engineering
> Swisscom Ltd
> Genfergasse 14
> 3050 Bern
> +41 31 893 89 61
> chapuis at ip-plus.net
> CCIE #6023
> ----------------------
>