[54183] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Identifying DoS-attacked IP address(es)

daemon@ATHENA.MIT.EDU (Neil J. McRae)
Mon Dec 16 13:01:35 2002

In-Reply-To: <5.1.1.6.2.20021216173806.0608db70@imap.ip-plus.net>
 "from Andre Chapuis at Dec 16, 2002 05:39:27 pm"
To: Andre Chapuis <chapuis@ip-plus.net>
Date: Mon, 16 Dec 2002 17:38:13 +0000 (GMT)
Cc: "Christopher L. Morrow" <chris@UU.NET>, nanog@nanog.org
From: neil@DOMINO.ORG (Neil J. McRae)
Errors-To: owner-nanog-outgoing@merit.edu


Sampled netflow, or look at the traceback stuff in later
IOS 12.0S versions.  Avoid filter lists as the GSR engine cards
have a statically limited number of entries.

Regards,
Neil.

home help back first fref pref prev next nref lref last post