Hi Kent,
Do you know about netflow switching, must I enable that?
Andy
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Friday, June 08, 2001 1:05 AM
To: [EMAIL PROTECTED]; Andy Low
Subject: RE: Dos Attack [7:7049]
In my experience, no. I've turned
> through?
>
> regards,
>
> andy
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> [EMAIL PROTECTED] Sent: Wednesday, June 06, 2001 5:24 AM To:
> [EMAIL PROTECTED] Subject: Re: Dos Attack [7:7049]
>
>
> Andy,
&g
Hi Kent,
Will IP accounting halt the router given 50Mbps of traffic passing through?
regards,
andy
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
[EMAIL PROTECTED]
Sent: Wednesday, June 06, 2001 5:24 AM
To: [EMAIL PROTECTED]
Subject: Re: Dos Attack
Andy,
1) Enable IP accounting on the router interface "closest" to the
traffic in question. Watch the output of "sh ip account" and you
should be able to tell fairly quickly what the originating IP address
is of the offending station
2) Now you have the IP, you know which segment the station
Don't know of anyway to tell within the router/switch unless you check the
traffic statistics on every single port..
I would love to know of a good way with just the router and switch to do
just this...
I've always has Sniffer Pro available, and it'll pinpoint your biggest
"talkers" in w
Hi Andy
Try this command on catalyst 5509
"show top" It gives the top stations report.
> -Original Message-
> From: Andy Low [SMTP:[EMAIL PROTECTED]]
> Sent: Mon, June 04, 2001 3:03 PM
> To: [EMAIL PROTECTED]
> Subject: Dos Attack [7:7049]
>
>
Hi,
If there is a machine within my network generating high load of traffic, how
can I detect the machine asap?
I have cisco 7507 routers and catalyst 5509 switches. Which command should I
use to check? On the catalyst switch which command can I use to find out
port the machine is plugged to?
T
7 matches
Mail list logo
