North American Network Operators Group|
Date Prev | Date Next |
Date Index |
Thread Index |
Author Index |
Re: Identifying DoS-attacked IP address(es)
- From: Christopher L. Morrow
- Date: Mon Dec 16 14:07:23 2002
On Mon, 16 Dec 2002, Neil J. McRae wrote:
> Sampled netflow, or look at the traceback stuff in later
> IOS 12.0S versions. Avoid filter lists as the GSR engine cards
> have a statically limited number of entries.
if something is being attacked it'll show in the 'statically limited'
listing, trust me... this is how we do it all day, every day...