nanog mailing list archives

Re: Identifying DoS-attacked IP address(es)


From: "Christopher L. Morrow" <chris () UU NET>
Date: Mon, 16 Dec 2002 16:35:20 +0000 (GMT)



On Mon, 16 Dec 2002, Andre Chapuis wrote:


Hi,
How do you identify a DoS-attacked IP address(es) on your ingress border router, assuming the latter is a Cisco 12000 
? I used to use ip accounting but they removed it from the S-code.

What info do you have when you are trying to accomplish this mission?

Thanks,
Andr?


---------------------
Andre Chapuis
IP+ Engineering
Swisscom Ltd
Genfergasse 14
3050 Bern
+41 31 893 89 61
chapuis () ip-plus net
CCIE #6023
----------------------



Current thread: