From owner-freebsd-questions Fri May 3 17:15:38 2002 Delivered-To: freebsd-questions@freebsd.org Received: from out4.mx.nwbl.wi.voyager.net (out4.mx.nwbl.wi.voyager.net [169.207.1.77]) by hub.freebsd.org (Postfix) with ESMTP id 1B0C437B416 for ; Fri, 3 May 2002 17:15:34 -0700 (PDT) Received: from shell.core.com (shell.core.com [169.207.1.89]) by out4.mx.nwbl.wi.voyager.net (8.12.3/8.11.4/1.7) with ESMTP id g440FXTN018719; Fri, 3 May 2002 19:15:33 -0500 Received: from localhost (raiden@localhost) by shell.core.com (8.11.6/8.11.6/1.3) with ESMTP id g440FXs14889; Fri, 3 May 2002 19:15:33 -0500 (CDT) Date: Fri, 3 May 2002 19:15:33 -0500 (CDT) From: Steven Lake X-X-Sender: raiden@shell.core.com To: Edwin Groothuis Cc: Steven Lake , Subject: Re: Ping of death? In-Reply-To: <20020504090857.E56548@k7.mavetju.org> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Ok, I got my solution. I'm getting hammered from one of our routers on one of our remote lans. Problem fixed and offending device pitched off the highest building available. :) thanks guys. On Sat, 4 May 2002, Edwin Groothuis wrote: > On Fri, May 03, 2002 at 05:58:20PM -0500, Steven Lake wrote: > > Does anyone have a way to monitor incoming traffic to find out if > > you're being hit with a dos attack or should I ring telco again and have > > them do a test on the T1 line to find the source? > > Try simple tools like tcpdump (tcpdump -ni ) and trafshow > (/usr/ports/net/trafshow). At least it will tell you what is going on. > > Edwin > > -- > Edwin Groothuis | Personal website: http://www.MavEtJu.org > edwin@mavetju.org | Interested in MUDs? Visit Fatal Dimensions: > bash$ :(){ :|:&};: | http://www.FatalDimensions.org/ > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message