-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Thu, 20 Mar 2008 21:19:51 -0300
"Marc G. Fournier" <scrappy@hub.org> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
>
> I'm using ipaudit right now, which does a reasonable job of dumping
> the data, but its at least a half hour out before I really know if a
> change I've made is having the desired effect ... would really like
> to find something more 'real time' for dealing with identifying a DOS
> recipient ...
>
> Is there anything I can do with a Cisco switch for this, maybe?
> Something more granular then mrtg?
Hmmm Cisco is a long time from my memory. I know with Linux you can
tell iptables to say, "If X IP initiates Y packets within Z time,
block!" Which is essentially what a DOS is.
I am sure Cisco can do the same thing but it would be out of my
expertise to tell you how.
Sincerely,
Joshua D. Drake
- --
The PostgreSQL Company since 1997: http://www.commandprompt.com/
PostgreSQL Community Conference: http://www.postgresqlconference.org/
United States PostgreSQL Association: http://www.postgresql.us/
Donate to the PostgreSQL Project: http://www.postgresql.org/about/donate
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFH42TKATb/zqfZUUQRAisaAJ455RTWEC2E6MpcEvlIJwHujmUvtQCfS+Yo
4JgZXiRF4IBeOzduPLAPfwM=
=Hgat
-----END PGP SIGNATURE-----