Re: Help me

[Mitchell Rowton <mrowton () gmail com>]

> So I make some caculation, every second, there are 16035 byte attack (I call
> "attack" because I was not allowed.
> Everybody help me explain this situation. I know, A request does not have
> big capacity and my ISA server was not logged any attack!

This sounds fishy.  16k a second in scans and other Internet trash is
definitely possible, but it seems quite extreme for a company that had
7gig total normal traffic.

In addition to logging the drops, I'd go with the earlier suggestion
to use mrtg and keep you ISP on its toes.


--
http://www.securitydocs.com/
Directory of Security White Papers