Forum Discussion
smp_86112
Cirrostratus
CirrostratusMethodolgy to ID source of DOS attack
Recently, I started receiving SNMP traps from an LTM pair indicating it was the target of a possible DOS attack.
Limiting open port RST response from 16170 to 250 packets/sec
...
hoolioCirrostratus
CirrostratusDo the embryonic connections show up in netstat -a output? Or do they have forged source IP addresses? I'm curious to see what options there are for tracing SYN floods.
Aaron
