Identifying DoS-attacked IP address(es)

Mon Dec 16 16:39:27 UTC 2002

Chris,
I often see the input-interface load is 100%.
André

At 16:35 16.12.2002 +0000, Christopher L. Morrow wrote:

>On Mon, 16 Dec 2002, Andre Chapuis wrote:
>
>>
>> Hi,
>> How do you identify a DoS-attacked IP address(es) on your ingress border router, assuming the latter is a Cisco 12000 ? I used to use ip accounting but they removed it from the S-code.
>
>What info do you have when you are trying to accomplish this mission?
>
>> Thanks,
>> André
>>
>>
>> ---------------------
>> Andre Chapuis
>> IP+ Engineering
>> Swisscom Ltd
>> Genfergasse 14
>> 3050 Bern
>> +41 31 893 89 61
>> chapuis at ip-plus.net
>> CCIE #6023
>> ----------------------
>>

---------------------
Andre Chapuis
IP+ Engineering
Swisscom Ltd
Genfergasse 14
3050 Bern
+41 31 893 89 61
chapuis at ip-plus.net
CCIE #6023
----------------------