Merit Network
Can't find what you're looking for? Search the Mail Archives.
  About Merit   Services   Network   Resources & Support   Network Research   News   Events   Home

Discussion Communities: Merit Network Email List Archives

North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

RE: [long] Re: DDoS: CAR vs TCP-Intercept vs NetFlow

  • From: Vijay Gill
  • Date: Mon Feb 28 22:49:36 2000

On Mon, 28 Feb 2000, Paul Ferguson wrote:

> Again, forget about flow-switching in any context except for
> tracing back attackers.

Correct.

> If you want the functionality to lower the threshold of DoS pain,
> CEF is your baby.

When it is working, yes.

> This is an operational forum, yes? Where is the input from the
> (current) operators?

We're still waiting on the hidden commands to be documented as mentioned
below.

http://www.zdnet.com/intweek/stories/news/0,4164,2435950,00.html

{quote}
Routers from Cisco and other vendors have the ability to detect the
signature patterns of a denial-of-service attack, and the routers can
filter out that traffic, Farnsworth said.
\end{quote}

/vijay







Discussion Communities


About Merit | Services | Network | Resources & Support | Network Research
News | Events | Contact | Site Map | Merit Network Home


Merit Network, Inc.