North American Network Operators Group
Date Prev | Date Next |
Date Index |
Thread Index |
Author Index |
Historical
RE: [long] Re: DDoS: CAR vs TCP-Intercept vs NetFlow
- From: Vijay Gill
- Date: Mon Feb 28 22:49:36 2000
On Mon, 28 Feb 2000, Paul Ferguson wrote:
> Again, forget about flow-switching in any context except for
> tracing back attackers.
Correct.
> If you want the functionality to lower the threshold of DoS pain,
> CEF is your baby.
When it is working, yes.
> This is an operational forum, yes? Where is the input from the
> (current) operators?
We're still waiting on the hidden commands to be documented as mentioned
below.
http://www.zdnet.com/intweek/stories/news/0,4164,2435950,00.html
{quote}
Routers from Cisco and other vendors have the ability to detect the
signature patterns of a denial-of-service attack, and the routers can
filter out that traffic, Farnsworth said.
\end{quote}
/vijay
|
