From: Vincent Mashburn (vmashburn@fedex.com)
Date: Tue Jan 09 2007 - 12:29:19 ART
"IP source-track" command.
Vince Mashburn
Sr. Voice / Data Engineer
901-263-5072
CCVP, CCNP
Cisco IP Telephony Support Specialist
Cisco IP Telephony Operations Specialist
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Ricky MK Au
Sent: Tuesday, January 09, 2007 1:07 AM
To: ccielab@groupstudy.com
Subject: Track the SYN attack from a particular host
Dear all,
How can we track if there is any SYN attack to a particular host? The
question is as follows.
It is suspected that there is a SYN attack from a particular IP address.
Configure the router to track all the attack and log them into the
syslog
server. Please do not use any ACL to achieve it and the logging only
performed one time per day.
Is anybody can help? Can I use ip tcp intercept?
This archive was generated by hypermail 2.1.4 : Thu Feb 08 2007 - 23:46:56 ART