Re: Identifying DoS-attacked IP address(es)

16 Dec 2002


      Chris,
I often see the input-interface load is 100%.
André

At 16:35 16.12.2002 +0000, Christopher L. Morrow wrote:
...
On Mon, 16 Dec 2002, Andre Chapuis wrote:
...
Hi,
How do you identify a DoS-attacked IP address(es) on your ingress border router, assuming the latter is a Cisco 12000 ? I used to use ip accounting but they removed it from the S-code.
What info do you have when you are trying to accomplish this mission?
...
Thanks,
André
---------------------
Andre Chapuis
IP+ Engineering
Swisscom Ltd
Genfergasse 14
3050 Bern
+41 31 893 89 61
chapuis@ip-plus.net
CCIE #6023
----------------------
---------------------
Andre Chapuis
IP+ Engineering
Swisscom Ltd
Genfergasse 14
3050 Bern
+41 31 893 89 61
chapuis@ip-plus.net
CCIE #6023
----------------------