Identifying DoS-attacked IP address(es)

Christopher L. Morrow chris at UU.NET
Mon Dec 16 19:02:10 UTC 2002


On Mon, 16 Dec 2002, Neil J. McRae wrote:

> Sampled netflow, or look at the traceback stuff in later
> IOS 12.0S versions.  Avoid filter lists as the GSR engine cards
> have a statically limited number of entries.
>

if something is being attacked it'll show in the 'statically limited'
listing, trust me... this is how we do it all day, every day...




More information about the NANOG mailing list