Re: Identifying DoS-attacked IP address(es)

["Christopher L. Morrow" <chris () UU NET>]

On Mon, 16 Dec 2002, Neil J. McRae wrote:

> Sampled netflow, or look at the traceback stuff in later
> IOS 12.0S versions.  Avoid filter lists as the GSR engine cards
> have a statically limited number of entries.

if something is being attacked it'll show in the 'statically limited'
listing, trust me... this is how we do it all day, every day...