[c-nsp] cisco 7500 UDP attack

[Adrian Chadd]

On Thu, Sep 21, 2006, Schahzad. Z Choudhry wrote:
> Thanks Rubens
> Nope i dont use logs, i have very powerful system for processing netflow 
> exports, we already use it for traffic analysis at very much deeper 
> level,like voice video traffic, protocol based traffic , our ip class 
> patterns etc etc.The same system i use to capture attacks or show ip cache 
> flow command.
> 
> i was intrested if cisco has developed something to break Dos attack or you 
> folks using something to fight with Dos attacks because these things are a 
> continous pain in neck, all the time you are at risk any time it can be 
> started and in some cases you just sit and watch how they are screwing your 
> internet bandwith even if u block them at core routers.

I don't know about the recent developments but there's been plenty of research
into mitigating DoS and DDoS attacks over the last 8 years or so.
Maybe try googling for some background information, check out some of the
papers and work presented at previous NANOG meetings, etc.




adrian