nanog mailing list archives

Re: Identifying DoS-attacked IP address(es)


From: "Christopher L. Morrow" <chris () UU NET>
Date: Mon, 16 Dec 2002 21:14:55 +0000 (GMT)



On Mon, 16 Dec 2002, Neil J. McRae wrote:

if something is being attacked it'll show in the 'statically limited'
listing, trust me... this is how we do it all day, every day...

Yes as have we, however you run out of memory/list entries
quickly and when that happens CEF gets disabled and it get pretty ugly.
This is more an issue for engine 0 and 2


Hmm, this we have not seen...


Current thread: