Identifying DoS-attacked IP address(es)

Tue Dec 17 00:36:58 UTC 2002

I can send you screenshots of our tool if you are interested.

-----Original Message-----
From: Andre Chapuis [mailto:chapuis at ip-plus.net]
Sent: Monday, December 16, 2002 9:12 AM
To: nanog at nanog.org
Subject: Identifying DoS-attacked IP address(es)

Hi,
How do you identify a DoS-attacked IP address(es) on your ingress border
router, assuming the latter is a Cisco 12000 ? I used to use ip accounting
but they removed it from the S-code.
Thanks,
André

---------------------
Andre Chapuis
IP+ Engineering
Swisscom Ltd
Genfergasse 14
3050 Bern
+41 31 893 89 61
chapuis at ip-plus.net
CCIE #6023
----------------------