[54198] in North American Network Operators' Group
RE: Identifying DoS-attacked IP address(es)
daemon@ATHENA.MIT.EDU (Brennan_Murphy@NAI.com)
Mon Dec 16 19:33:48 2002
From: Brennan_Murphy@NAI.com
To: chapuis@ip-plus.net, nanog@nanog.org
Date: Mon, 16 Dec 2002 16:36:58 -0800
Errors-To: owner-nanog-outgoing@merit.edu
I can send you screenshots of our tool if you are interested.
-----Original Message-----
From: Andre Chapuis [mailto:chapuis@ip-plus.net]
Sent: Monday, December 16, 2002 9:12 AM
To: nanog@nanog.org
Subject: Identifying DoS-attacked IP address(es)
Hi,
How do you identify a DoS-attacked IP address(es) on your ingress =
border
router, assuming the latter is a Cisco 12000 ? I used to use ip =
accounting
but they removed it from the S-code.
Thanks,
Andr=E9
---------------------
Andre Chapuis
IP+ Engineering
Swisscom Ltd
Genfergasse 14
3050 Bern
+41 31 893 89 61
chapuis@ip-plus.net
CCIE #6023
----------------------
