nanog mailing list archives

Identifying DoS-attacked IP address(es)


From: Andre Chapuis <chapuis () ip-plus net>
Date: Mon, 16 Dec 2002 15:12:15 +0100


Hi,
How do you identify a DoS-attacked IP address(es) on your ingress border router, assuming the latter is a Cisco 12000 ? 
I used to use ip accounting but they removed it from the S-code.
Thanks,
André


---------------------
Andre Chapuis
IP+ Engineering
Swisscom Ltd
Genfergasse 14
3050 Bern
+41 31 893 89 61
chapuis () ip-plus net
CCIE #6023
----------------------


Current thread: