[dns-operations] DDoS attack data collection
steve at ibctech.ca
Wed Jan 28 17:07:25 UTC 2009
Duane Wessels wrote:
> On Tue, 27 Jan 2009, Steve Bertrand wrote:
>> Being a very small ISP, with only two Internet connections, would it be
>> helpful if I ran this on my border routers/ids's for all traffic ingress
>> to my entire /21?
> I think that would be cool. You might want to change the "-c 100" to
> something like "-c 1000" or higher.
Done, with the updated list.
I'm also monitoring the network for ingress traffic with the same
pattern from IPs not in the list.
More information about the dns-operations