Re: Identifying DoS-attacked IP address(es)

[Andre Chapuis <chapuis () ip-plus net>]

Chris,
I often see the input-interface load is 100%.
André

At 16:35 16.12.2002 +0000, Christopher L. Morrow wrote:

> On Mon, 16 Dec 2002, Andre Chapuis wrote:
>
> > Hi,
> > How do you identify a DoS-attacked IP address(es) on your ingress border router, assuming the latter is a Cisco 
> > 12000 ? I used to use ip accounting but they removed it from the S-code.
>
> What info do you have when you are trying to accomplish this mission?
>
> > Thanks,
> > André
> >
> >
> > ---------------------
> > Andre Chapuis
> > IP+ Engineering
> > Swisscom Ltd
> > Genfergasse 14
> > 3050 Bern
> > +41 31 893 89 61
> > chapuis () ip-plus net
> > CCIE #6023
> > ----------------------

---------------------
Andre Chapuis
IP+ Engineering
Swisscom Ltd
Genfergasse 14
3050 Bern
+41 31 893 89 61
chapuis () ip-plus net
CCIE #6023
----------------------