[c-nsp] 6500 under DDoS

[Blaz Zupan]

> 	They want to have their uplink to you on the sup720 module, since
> it's distributed.  That will help..
>
> 	it should be in either slot5 or slot6.

Thanks, I'll make them check it.

A Cisco employee also suggested that they might be overflowing the TCAMs in
the linecards which could be caused by poorly constructed ACLs so that the
traffic is software switched.

I also found out that the customer has turned on "ip nbar protocol-discovery".

Hmmm, seems like I'll refer them to the TAC.