North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Identifying DoS-attacked IP address(es)

  • From: Christopher L. Morrow
  • Date: Mon Dec 16 11:37:38 2002 
On Mon, 16 Dec 2002, Andre Chapuis wrote:

>
> Hi,
> How do you identify a DoS-attacked IP address(es) on your ingress border router, assuming the latter is a Cisco 12000 ? I used to use ip accounting but they removed it from the S-code.

What info do you have when you are trying to accomplish this mission?

> Thanks,
> Andr�
>
>
> ---------------------
> Andre Chapuis
> IP+ Engineering
> Swisscom Ltd
> Genfergasse 14
> 3050 Bern
> +41 31 893 89 61
> [email protected]
> CCIE #6023
> ----------------------
>