Re: Ping flooding (fwd)

[Per Gregers Bilse <bilse () EU net>]

On Jul 9, 19:15, Curtis Villamizar <curtis () ans net> wrote:
> I have always been under the impression that Cisco flow switching and
> high performance were mutually exclusive if there were too many active
> flows as is the case for the major US ISPs at least.

This may or may not be the case, but that wasn't the question; the
question was if information required to track bogus packets was
available.

Apart from that, flow switching should probably be seen in the
light of distributed switching, but all of this is something
sales critters are there to talk about.

> Another difference is with the flow switching, you need to catch them
> in the act.  With the sampling and collection, you can call hours
> later (days or weeks actually, years if you count going to tape) and
> still determine the candidate entry points for the traffic.  I don't
> think there is a practical way to get the same sort of historic
> archive from the flow switching stats.

As noted in other mail, it appears there is a solution to that.

-- 
------ ___                        --- Per G. Bilse, Mgr Network Operations Ctr
----- /     /  /   __   ___  _/_ ---- EUnet Communications Services B.V.
---- /---  /  /  /  /  /__/  /  ----- Singel 540, 1017 AZ Amsterdam, NL
--- /___  /__/  /  /  /__   /  ------ tel: +31 20 6233803, fax: +31 20 6224657
---                           ------- 24hr emergency number: +31 20 421 0865
--- Connecting Europe since 1982  --- http://www.EU.net  e-mail: bilse () EU net
- - - - - - - - - - - - - - - - -