[81079] in North American Network Operators' Group
Re: IDS/DDOS prevention hardware that doesnt cost $80,000+?
daemon@ATHENA.MIT.EDU (Kim Onnel)
Wed May 25 10:47:41 2005
Date: Wed, 25 May 2005 16:46:33 +0200
From: Kim Onnel <karim.adel@gmail.com>
Reply-To: Kim Onnel <karim.adel@gmail.com>
To: Drew Weaver <drew.weaver@thenap.com>
Cc: nanog@merit.edu
In-Reply-To: <B9ECBF8D89E7684EB63FF250E8788B191194D1@BIGLOG.thenap.com>
Errors-To: owner-nanog@merit.edu
------=_Part_21054_20093014.1117032393287
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Cisco routers and switches export network accounting information
you can write a software that reads these flows and report to you who is th=
e=20
Top Talker/DDoS
or you can get an open-source one (flow-tools, ntop,..)
or you can buy one (Arbor, lancope, crannog,...)
On 5/25/05, Drew Weaver <drew.weaver@thenap.com> wrote:
>=20
> I'm wondering if there is such an animal out there? All of the ones I=20
> have seen are made for the multi-gigabit service provider there aren't an=
y=20
> for the smaller mid-rangers out there. Can anyone suggest anything that w=
e=20
> can put in place? The attacks we're seeing are just a huge influx of PPS =
not=20
> so much the amount of bandwidth.
>=20
> Offlist to keep chatter low is fine with me.
>=20
> Sorry to be a bother,
>=20
> -D
>=20
>
------=_Part_21054_20093014.1117032393287
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Cisco routers and switches export network accounting information<br>
you can write a software that reads these flows and report to you who is th=
e Top Talker/DDoS<br>
or you can get an open-source one (flow-tools, ntop,..)<br>
or you can buy one (Arbor, lancope, crannog,...)<br>
<br>
<br><br><div><span class=3D"gmail_quote">On 5/25/05, <b class=3D"gmail_send=
ername">Drew Weaver</b> <<a href=3D"mailto:drew.weaver@thenap.com">drew.=
weaver@thenap.com</a>> wrote:</span><blockquote class=3D"gmail_quote" st=
yle=3D"border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex=
; padding-left: 1ex;">
<div>
<p><font face=3D"Arial" size=3D"2"><span style=3D"font-size: 10pt; font-fam=
ily: Arial;"> &n=
bsp; I'm wondering if there is such an animal
out there? All of the ones I have seen are made for the multi-gigabit servi=
ce
provider there aren't any for the smaller mid-rangers out there. Can
anyone suggest anything that we can put in place? The attacks we're
seeing are just a huge influx of PPS not so much the amount of bandwidth.</=
span></font></p>
<p><font face=3D"Arial" size=3D"2"><span style=3D"font-size: 10pt; font-fam=
ily: Arial;"> </span></font></p>
<p><font face=3D"Arial" size=3D"2"><span style=3D"font-size: 10pt; font-fam=
ily: Arial;">Offlist to keep chatter low is fine with me.</span></font></p>
<p><font face=3D"Arial" size=3D"2"><span style=3D"font-size: 10pt; font-fam=
ily: Arial;"> </span></font></p>
<p><font face=3D"Arial" size=3D"2"><span style=3D"font-size: 10pt; font-fam=
ily: Arial;">Sorry to be a bother,</span></font></p>
<p><font face=3D"Arial" size=3D"2"><span style=3D"font-size: 10pt; font-fam=
ily: Arial;"> </span></font></p>
<p><font face=3D"Arial" size=3D"2"><span style=3D"font-size: 10pt; font-fam=
ily: Arial;">-D</span></font></p>
<p><font face=3D"Arial" size=3D"2"><span style=3D"font-size: 10pt; font-fam=
ily: Arial;"> </span></font></p>
<p><font face=3D"Arial" size=3D"2"><span style=3D"font-size: 10pt; font-fam=
ily: Arial;"> </span></font></p>
</div>
</blockquote></div><br>
------=_Part_21054_20093014.1117032393287--
