[54187] in North American Network Operators' Group
Re: Identifying DoS-attacked IP address(es)
daemon@ATHENA.MIT.EDU (Christopher L. Morrow)
Mon Dec 16 16:15:48 2002
Date: Mon, 16 Dec 2002 21:14:55 +0000 (GMT)
From: "Christopher L. Morrow" <chris@UU.NET>
To: "Neil J. McRae" <neil@DOMINO.ORG>
Cc: "Christopher L. Morrow" <chris@UU.NET>,
Andre Chapuis <chapuis@ip-plus.net>, <nanog@nanog.org>
In-Reply-To: <20021216192005.0AD6A398C2@equinox.DOMINO.ORG>
Errors-To: owner-nanog-outgoing@merit.edu
On Mon, 16 Dec 2002, Neil J. McRae wrote:
> > if something is being attacked it'll show in the 'statically limited'
> > listing, trust me... this is how we do it all day, every day...
>
> Yes as have we, however you run out of memory/list entries
> quickly and when that happens CEF gets disabled and it get pretty ugly.
> This is more an issue for engine 0 and 2
>
Hmm, this we have not seen...
