[54180] in North American Network Operators' Group
Re: Identifying DoS-attacked IP address(es)
daemon@ATHENA.MIT.EDU (Christopher L. Morrow)
Mon Dec 16 11:36:06 2002
Date: Mon, 16 Dec 2002 16:35:20 +0000 (GMT)
From: "Christopher L. Morrow" <chris@UU.NET>
To: Andre Chapuis <chapuis@ip-plus.net>
Cc: <nanog@nanog.org>
In-Reply-To: <5.1.1.6.2.20021216151023.06097b80@imap.ip-plus.net>
Errors-To: owner-nanog-outgoing@merit.edu
On Mon, 16 Dec 2002, Andre Chapuis wrote:
>
> Hi,
> How do you identify a DoS-attacked IP address(es) on your ingress border =
router, assuming the latter is a Cisco 12000 ? I used to use ip accounting =
but they removed it from the S-code.
What info do you have when you are trying to accomplish this mission?
> Thanks,
> Andr=E9
>
>
> ---------------------
> Andre Chapuis
> IP+ Engineering
> Swisscom Ltd
> Genfergasse 14
> 3050 Bern
> +41 31 893 89 61
> chapuis@ip-plus.net
> CCIE #6023
> ----------------------
>
