[54177] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Identifying DoS-attacked IP address(es)

daemon@ATHENA.MIT.EDU (Andre Chapuis)
Mon Dec 16 09:12:57 2002

Date: Mon, 16 Dec 2002 15:12:15 +0100
To: nanog@nanog.org
From: Andre Chapuis <chapuis@ip-plus.net>
Errors-To: owner-nanog-outgoing@merit.edu


Hi,
How do you identify a DoS-attacked IP address(es) on your ingress border=
 router, assuming the latter is a Cisco 12000 ? I used to use ip accounting=
 but they removed it from the S-code.
Thanks,
Andr=E9


---------------------
Andre Chapuis
IP+ Engineering
Swisscom Ltd
Genfergasse 14
3050 Bern
+41 31 893 89 61
chapuis@ip-plus.net
CCIE #6023
----------------------


home help back first fref pref prev next nref lref last post