RE: Dos Attack [7:7049]

Hi Kent, Do you know about netflow switching, must I enable that? Andy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Friday, June 08, 2001 1:05 AM To: [EMAIL PROTECTED]; Andy Low Subject: RE: Dos Attack [7:7049] In my experience, no. I've turned on IP

RE: Dos Attack [7:7049]

-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of [EMAIL PROTECTED] Sent: Wednesday, June 06, 2001 5:24 AM To: [EMAIL PROTECTED] Subject: Re: Dos Attack [7:7049] Andy, 1) Enable IP accounting on the router interface closest to the traffic

Re: Dos Attack [7:7049]

Andy, 1) Enable IP accounting on the router interface closest to the traffic in question. Watch the output of sh ip account and you should be able to tell fairly quickly what the originating IP address is of the offending station 2) Now you have the IP, you know which segment the station is

RE: Dos Attack [7:7049]

Hi Kent, Will IP accounting halt the router given 50Mbps of traffic passing through? regards, andy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of [EMAIL PROTECTED] Sent: Wednesday, June 06, 2001 5:24 AM To: [EMAIL PROTECTED] Subject: Re: Dos Attack

RE: Dos Attack [7:7049]

Hi Andy Try this command on catalyst 5509 show top It gives the top stations report. -Original Message- From: Andy Low [SMTP:[EMAIL PROTECTED]] Sent: Mon, June 04, 2001 3:03 PM To: [EMAIL PROTECTED] Subject: Dos Attack [7:7049] Hi, If there is a machine within my

Re: Dos Attack [7:7049]

Don't know of anyway to tell within the router/switch unless you check the traffic statistics on every single port.. I would love to know of a good way with just the router and switch to do just this... I've always has Sniffer Pro available, and it'll pinpoint your biggest talkers in