North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Identifying DoS-attacked IP address(es)

  • From: Christopher L. Morrow
  • Date: Mon Dec 16 14:07:23 2002 
On Mon, 16 Dec 2002, Neil J. McRae wrote:

> Sampled netflow, or look at the traceback stuff in later
> IOS 12.0S versions.  Avoid filter lists as the GSR engine cards
> have a statically limited number of entries.
>

if something is being attacked it'll show in the 'statically limited'
listing, trust me... this is how we do it all day, every day...