Cisco routers and switches export network accounting information
you can write a software that reads these flows and report to you who is the Top Talker/DDoS
or you can get an open-source one (flow-tools, ntop,..)
or you can buy one (Arbor, lancope, crannog,...)



On 5/25/05, Drew Weaver <drew.weaver@thenap.com> wrote:

            I'm wondering if there is such an animal out there? All of the ones I have seen are made for the multi-gigabit service provider there aren't any for the smaller mid-rangers out there. Can anyone suggest anything that we can put in place? The attacks we're seeing are just a huge influx of PPS not so much the amount of bandwidth.

 

Offlist to keep chatter low is fine with me.

 

Sorry to be a bother,

 

-D