[c-nsp] DDOS Attacks Mitigation

[Satish Patel]

How does Fastnetmon differ from nfsen? 

We are using nfsen to detect DDoS and we are happy but I love to try this one too. 

--
Sent from my iPhone

> On Nov 4, 2016, at 4:39 AM, John Gitau <jgitau at gmail.com> wrote:
> 
> If you're on the cheap you could try
> https://fastnetmon.com/
> https://github.com/pavel-odintsov/fastnetmon  (source code and what not for
> the brave). I have used it in cases where a client cant afford arbor et'all
> and doesnt want to just drop the traffic.
> 
> JG
> 
> 
>> On Fri, Nov 4, 2016 at 10:50 AM, Mark Tinka <mark.tinka at seacom.mu> wrote:
>> 
>> 
>> 
>>> On 4/Nov/16 09:46, Samir Abid Al-mahdi wrote:
>>> 
>>> Hi,
>>> 
>>> Ok, but how are they going to redirect my traffic to their system.
>>> 
>>> I dont have a domain to redirect it by DNS.
>>> 
>>> Does it mean they will BGP advertise my prefixes ? ?
>> 
>> You'd have to discuss that with them, but at the most basic level, an
>> Arbor system can automatically begin announcing a route into BGP that
>> needs to have its traffic scrubbed once an attack is detected.
>> 
>> Matching can be high-level (ASN) or granular (IP address).
>> 
>> I suppose other systems have a similar mechanism, but I haven't used those.
>> 
>> Mark.
>> 
>> _______________________________________________
>> cisco-nsp mailing list  cisco-nsp at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>> archive at http://puck.nether.net/pipermail/cisco-nsp/
> 
> 
> 
> -- 
> **Gitau
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/