RE: Products detecting DDoS attacks

["Wayne S. Ackley" <wackley () ideorlando org>]

Go to
http://www.snort.org/


-----Original Message-----
From: Kip Sr. [mailto:kipsr1 () yahoo com]
Sent: Monday, December 08, 2003 12:53 PM
To: security-basics () securityfocus com
Subject: Products detecting DDoS attacks


Hello All!

I am running a small web site and I am interested in
deploying software/hardware which can detect DDoS
attacks (SYN floods, application based attacks, etc)
on my perimeter network. I have been reading that some
products will do this... like Cisco Netflow, Arbor
networks, etc.. but I am not sure how effective these
products are.

Essentially, I just looking for some good tools that
can quickly detect the source IP of zombie machines so
I can go back to my ISP and have them filter out the
traffic upstream.

Thanks in advance for your help!
Kip Sr.



__________________________________
Do you Yahoo!?
New Yahoo! Photos - easier uploading and sharing.
http://photos.yahoo.com/

---------------------------------------------------------------------------
----------------------------------------------------------------------------



---------------------------------------------------------------------------
----------------------------------------------------------------------------