- checking for a certain ip address
- Posted by Tim J. Dunn on November 4th, 2003
What command in IOS do I need to check to see ip address that are bringing
in traffic to the router? My router just slowed down much slower than normal
and am looking to see if there is a DOS attack happening
thanks
--
Tim J. Dunn
Systems Administrator
Sunset Net
(530) 879-5660 x108
- Posted by Barry Margolin on November 5th, 2003
In article <bo9gap02o55@enews1.newsguy.com>,
Tim J. Dunn <macgyver@sunset.net> wrote:
Enable CEF and then use "show ip cache flow" to see detailed traffic
statistics.
In our experience, sudden slowdowns like this are often the result of one
of your machines being infected with the Nachi virus.
--
Barry Margolin, barry.margolin@level3.com
Level(3), Woburn, MA
*** DON'T SEND TECHNICAL QUESTIONS DIRECTLY TO ME, post them to newsgroups.
Please DON'T copy followups to me -- I'll assume it wasn't posted to the group.
- Posted by Sai on November 7th, 2003
Alternatively you can get into the interface and issue a command "ip
accounting output-packets", then from the global mode issue a command
"sh ip accounting", this will give you a list of all the source and
destination IP adresses with the amount of data flowing.
Sai.
Barry Margolin <barry.margolin@level3.com> wrote in message news:<0B8qb.365$lK3.197@news.level3.com>...
