Forum Discussion
Roger_101461
Nimbostratus
Dec 15, 2011"Blocking DOS attack" showed on ltm led,How to tracked attack surce?
Hey everyone,
A alert "Blocking DOS attack" showed on ltm led
And the Local Traffic log only have two logs which looks related.
"sweeper_update: aggressive mode activated. 372313/438016 pages sweeper_update: aggressive mode activated. 372313/438016 pages"
"sweeper_update: aggressive mode deactivated. 371799/438016 pages sweeper_update: aggressive mode deactivated. 371799/438016 pages"
The system performance and connection looks normally in that time.
I want to track the attack source,what should i do?
- hoolio
Cirrostratus
Hi Roger,
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects