149.174.10.0 149.174.99.0 DDOS UDP DNS Aol your clients are either performing a ddos attack on the following IP addresses or they are refusing the answers. The NetFlow Output shows the requests and the answers, what is going on here? Aol admins, if you are there then, please call us immediately, 301-340-1533 Sincerely, Peter Schroebel crossfire@smsonline.net admin@e-annix.com Se1/0 149.174.10.7 Fa0/0 66.79.98.30 11 2427 0035 2 Se3/1 149.174.10.8 Fa0/0 66.79.98.30 11 2427 0035 16 Se3/0 149.174.10.7 Fa0/0 66.79.98.40 11 2427 0035 13 Se3/0 149.174.10.9 Fa0/0 66.79.98.30 11 2427 0035 21 Se3/0 149.174.10.8 Fa0/0 66.79.98.30 11 2427 0035 11 Se3/1 149.174.10.7 Fa0/0 66.79.98.40 11 2427 0035 18 Se3/0 149.174.10.9 Fa0/0 66.79.98.30 11 2425 0035 1 Se3/1 149.174.10.4 Fa0/0 66.79.98.40 11 2427 0035 11 Se3/0 149.174.10.8 Fa0/0 66.79.98.30 11 2425 0035 1 Se3/0 149.174.10.4 Fa0/0 66.79.98.40 11 2427 0035 11 Se1/0 149.174.10.9 Fa0/0 66.79.98.30 11 2427 0035 3 Se1/0 149.174.10.7 Fa0/0 66.79.98.40 11 2427 0035 9 Se1/0 149.174.10.8 Fa0/0 66.79.98.30 11 2427 0035 11 Se1/0 149.174.10.4 Fa0/0 66.79.98.40 11 2427 0035 29 Se3/0 149.174.10.7 Fa0/0 66.79.98.30 11 2427 0035 6 Se3/1 149.174.10.7 Fa0/0 66.79.98.30 11 2427 0035 11 Se1/0 149.174.10.9 Fa0/0 66.79.98.40 11 2427 0035 2 Se1/0 149.174.10.8 Fa0/0 66.79.98.40 11 2427 0035 16 Se3/0 149.174.10.9 Fa0/0 66.79.98.40 11 2425 0035 1 Se3/1 149.174.10.8 Fa0/0 66.79.98.40 11 2427 0035 11 Se3/0 149.174.10.9 Fa0/0 66.79.98.40 11 2427 0035 44 Se3/0 149.174.10.8 Fa0/0 66.79.98.40 11 2427 0035 3 Se3/1 149.174.10.9 Fa0/0 66.79.98.40 11 2427 0035 16 Se3/1 149.174.10.4 Fa0/0 66.79.98.30 11 2427 0035 13 Se3/0 149.174.10.4 Fa0/0 66.79.98.30 11 2427 0035 15 Se1/0 149.174.10.4 Fa0/0 66.79.98.30 11 2427 0035 17 Fa0/0 66.79.98.60 Se1/0 149.174.166.25 11 0035 8001 5 Fa0/0 66.79.98.40 Se3/0 149.174.10.4 11 0035 2427 98 Fa0/0 66.79.98.40 Se3/0 149.174.10.8 11 0035 2427 43 Fa0/0 66.79.98.40 Se3/0 149.174.10.9 11 0035 2425 1 Fa0/0 66.79.98.40 Se3/0 149.174.10.7 11 0035 2427 179 Fa0/0 66.79.98.40 Se3/0 149.174.10.9 11 0035 2427 46 Fa0/0 66.79.98.30 Se3/0 149.174.10.9 11 0035 2427 46 Fa0/0 66.79.98.30 Se3/0 149.174.10.9 11 0035 2425 1 Fa0/0 66.79.98.30 Se3/0 149.174.10.8 11 0035 2427 43 Fa0/0 66.79.98.30 Se3/0 149.174.10.7 11 0035 2427 18 Fa0/0 66.79.98.30 Se3/0 149.174.10.4 11 0035 2427 99 Fa0/0 66.79.96.5 Se1/0 149.174.166.25 11 0035 8001 5 Fa0/0 66.79.98.40 Se3/0 149.174.99.54 11 0035 2425 1 Fa0/0 66.79.98.40 Se3/0 149.174.99.54 11 0035 2427 50 Fa0/0 66.79.98.40 Se3/0 149.174.99.48 11 0035 2427 42 Fa0/0 66.79.98.40 Se3/0 149.174.99.44 11 0035 2427 207 Fa0/0 66.79.98.40 Se3/0 149.174.99.43 11 0035 2427 36 Fa0/0 66.79.98.30 Se3/0 149.174.99.48 11 0035 2427 42 Fa0/0 66.79.98.30 Se3/0 149.174.99.44 11 0035 2427 125 Fa0/0 66.79.98.30 Se3/0 149.174.99.43 11 0035 2427 36 Fa0/0 66.79.98.30 Se3/0 149.174.99.54 11 0035 2427 52 Fa0/0 66.79.98.30 Se3/0 149.174.99.54 11 0035 2425 1 Se3/0 149.174.166.25 Fa0/0 66.79.96.5 11 8001 0035 4 Se3/1 149.174.166.25 Fa0/0 66.79.96.5 11 8001 0035 1 Se1/0 149.174.166.25 Fa0/0 66.79.96.5 11 8001 0035 2 Se1/0 149.174.166.25 Fa0/0 66.79.98.60 11 8001 0035 1 Se3/1 149.174.166.25 Fa0/0 66.79.98.60 11 8001 0035 3 Se3/0 149.174.166.25 Fa0/0 66.79.98.60 11 8001 0035 3 Se3/1 149.174.99.54 Fa0/0 66.79.98.40 11 2427 0035 7 Se3/0 149.174.99.54 Fa0/0 66.79.98.40 11 2427 0035 17 Se3/0 149.174.99.54 Fa0/0 66.79.98.40 11 2425 0035 1 Se1/0 149.174.99.54 Fa0/0 66.79.98.30 11 2425 0035 1 Se3/1 149.174.99.48 Fa0/0 66.79.98.40 11 2427 0035 12 Se3/0 149.174.99.48 Fa0/0 66.79.98.40 11 2427 0035 19 Se1/0 149.174.99.54 Fa0/0 66.79.98.30 11 2427 0035 18 Se3/1 149.174.99.54 Fa0/0 66.79.98.30 11 2427 0035 13 Se1/0 149.174.99.48 Fa0/0 66.79.98.40 11 2427 0035 11 Se3/0 149.174.99.54 Fa0/0 66.79.98.30 11 2427 0035 22 Se1/0 149.174.99.54 Fa0/0 66.79.98.40 11 2427 0035 9 Se3/1 149.174.99.44 Fa0/0 66.79.98.30 11 2427 0035 2 Se3/0 149.174.99.44 Fa0/0 66.79.98.30 11 2427 0035 9 Se3/1 149.174.99.43 Fa0/0 66.79.98.30 11 2427 0035 25 Se1/0 149.174.99.44 Fa0/0 66.79.98.30 11 2427 0035 19 Se1/0 149.174.99.43 Fa0/0 66.79.98.30 11 2427 0035 15 Se3/1 149.174.99.48 Fa0/0 66.79.98.30 11 2427 0035 14 Se3/0 149.174.99.48 Fa0/0 66.79.98.30 11 2427 0035 6 Se1/0 149.174.99.48 Fa0/0 66.79.98.30 11 2427 0035 13 Se1/0 149.174.99.43 Fa0/0 66.79.98.40 11 2427 0035 8 Se1/0 149.174.99.44 Fa0/0 66.79.98.40 11 2427 0035 6 Se3/1 149.174.99.44 Fa0/0 66.79.98.40 11 2427 0035 24 Se3/0 149.174.99.44 Fa0/0 66.79.98.40 11 2427 0035 1 Se3/0 149.174.99.43 Fa0/0 66.79.98.40 11 2427 0035 9 Se3/1 149.174.99.43 Fa0/0 66.79.98.40 11 2427 0035 44 Sincerely, Peter Schroebel crossfire@smsonline.net admin@e-annix.com