Adam Neat wrote: > does anyone know of a way to easily trace syn flooding, dos, smurf and > other types of traiffc on a network? What do you mean by `trace'? If you want to find where it came from, the answer is that you can't. Attacks which don't require the sender to receive any data can (and therefore do) use a spoofed source address. ICMP-flooding attacks can be logged with icmplogd. There may be something similar for SYN-flooding, but I don't know offhand. -- Glynn Clements <[EMAIL PROTECTED]> - To unsubscribe from this list: send the line "unsubscribe linux-net" in the body of a message to [EMAIL PROTECTED]
