nanog mailing list archives
Re: Identifying DoS-attacked IP address(es)
From: "Christopher L. Morrow" <chris () UU NET>
Date: Mon, 16 Dec 2002 19:02:10 +0000 (GMT)
On Mon, 16 Dec 2002, Neil J. McRae wrote:
Sampled netflow, or look at the traceback stuff in later IOS 12.0S versions. Avoid filter lists as the GSR engine cards have a statically limited number of entries.
if something is being attacked it'll show in the 'statically limited' listing, trust me... this is how we do it all day, every day...
Current thread:
- Identifying DoS-attacked IP address(es) Andre Chapuis (Dec 16)
- RE: Identifying DoS-attacked IP address(es) Barry Raveendran Greene (Dec 16)
- Re: Identifying DoS-attacked IP address(es) Christopher L. Morrow (Dec 16)
- Message not available
- Re: Identifying DoS-attacked IP address(es) Andre Chapuis (Dec 16)
- Re: Identifying DoS-attacked IP address(es) Christopher L. Morrow (Dec 16)
- Re: Identifying DoS-attacked IP address(es) Neil J. McRae (Dec 16)
- Re: Identifying DoS-attacked IP address(es) Christopher L. Morrow (Dec 16)
- Re: Identifying DoS-attacked IP address(es) Neil J. McRae (Dec 16)
- Re: Identifying DoS-attacked IP address(es) Christopher L. Morrow (Dec 16)
- Re: Identifying DoS-attacked IP address(es) Andre Chapuis (Dec 16)
- RE: Identifying DoS-attacked IP address(es) Livio Ricciulli (Dec 16)
- RE: Identifying DoS-attacked IP address(es) Christopher L. Morrow (Dec 16)
- Re: Identifying DoS-attacked IP address(es) James-lists (Dec 16)
- Re: Identifying DoS-attacked IP address(es) Christopher L. Morrow (Dec 16)
- Re: Identifying DoS-attacked IP address(es) James-lists (Dec 16)
- Re: Identifying DoS-attacked IP address(es) Feger, James (Dec 16)
- Re: Identifying DoS-attacked IP address(es) Christopher L. Morrow (Dec 16)
- Re: Identifying DoS-attacked IP address(es) Valdis . Kletnieks (Dec 16)