From owner-freebsd-questions@FreeBSD.ORG Sat Aug 27 20:00:22 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id DEF0A16A41F for ; Sat, 27 Aug 2005 20:00:22 +0000 (GMT) (envelope-from mark@mkproductions.org) Received: from ylpvm29.prodigy.net (ylpvm29-ext.prodigy.net [207.115.57.60]) by mx1.FreeBSD.org (Postfix) with ESMTP id 656F843D55 for ; Sat, 27 Aug 2005 20:00:22 +0000 (GMT) (envelope-from mark@mkproductions.org) Received: from pimout3-ext.prodigy.net (pimout3-int.prodigy.net [207.115.4.218]) by ylpvm29.prodigy.net (8.12.10 outbound/8.12.10) with ESMTP id j7RK0CbS004477 for ; Sat, 27 Aug 2005 16:00:12 -0400 X-ORBL: [66.139.109.225] Received: from [192.168.1.25] (ppp-66-139-109-225.dsl.stlsmo.swbell.net [66.139.109.225]) by pimout3-ext.prodigy.net (8.13.4 outbound domainkey aix/8.13.4) with ESMTP id j7RK0CXg087418; Sat, 27 Aug 2005 16:00:20 -0400 Message-ID: <4310C64B.2060807@mkproductions.org> Date: Sat, 27 Aug 2005 15:00:11 -0500 From: Mark Kane User-Agent: Mozilla Thunderbird 1.0.6 (X11/20050816) X-Accept-Language: en-us, en MIME-Version: 1.0 To: vladone References: <1905744288.20050827224121@spaingsm.com> In-Reply-To: <1905744288.20050827224121@spaingsm.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-questions@freebsd.org Subject: Re: how to know if i'm under flood? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 27 Aug 2005 20:00:23 -0000 vladone wrote: > Hi! > How i can verify if i'm under flood atack? Look at netstat, see if tons of connections are there. Maybe try the Ntop port (/usr/ports/net/ntop). It has a nice web interface showing traffic. -Mark