From owner-freebsd-questions@FreeBSD.ORG  Sun Mar 21 20:48:23 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id B973916A4CF
	for <freebsd-questions@freebsd.org>;
	Sun, 21 Mar 2004 20:48:23 -0800 (PST)
Received: from lerami.lerctr.org (lerami.lerctr.org [192.147.25.11])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 470D143D2F
	for <freebsd-questions@freebsd.org>;
	Sun, 21 Mar 2004 20:48:23 -0800 (PST)	(envelope-from ler@lerctr.org)
Received: from lerlaptop.lerctr.org ([192.147.25.14])
	by lerami.lerctr.org with asmtp (Exim 4.30)
	id 1B5HML-0002D6-Rj; Sun, 21 Mar 2004 22:48:21 -0600
Date: Sun, 21 Mar 2004 22:48:19 -0600
From: Larry Rosenman <ler@lerctr.org>
To: "Marc G. Fournier" <scrappy@hub.org>,
	freebsd-questions@freebsd.org
Message-ID: <119330000.1079930899@lerlaptop.lerctr.org>
In-Reply-To: <20040322002930.N98092@ganymede.hub.org>
References: <20040322002930.N98092@ganymede.hub.org>
X-Mailer: Mulberry/3.1.2 (Linux/x86)
X-PGP-Info: All other keys are old/dead.
X-PGP-Key: 0x3c49bdd6
X-PGP-Fingerprint: D0D1 3C11 F42F 6B29 FA67  6BF3 AD13 4685 3C49 BDD6
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
 protocol="application/pgp-signature";
 boundary="==========8485BC4CCAAFD3E9FBC0=========="
Subject: Re: monitoring for DDoS attacks ...
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 22 Mar 2004 04:48:23 -0000

--==========8485BC4CCAAFD3E9FBC0==========
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline



--On Monday, March 22, 2004 00:45:59 -0400 "Marc G. Fournier"=20
<scrappy@hub.org> wrote:

>
> Does anyone know of any software that can monitor a link and report any
> 'unusual spikes' in traffic?
look at Snort, and if you have a netflow speaking router, the netflow
based tools.

LER

>
> ----
> Marc G. Fournier           Hub.Org Networking Services
> (http://www.hub.org) Email: scrappy@hub.org           Yahoo!: yscrappy
> ICQ: 7615664 _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "freebsd-questions-unsubscribe@freebsd.org"
>



--=20
Larry Rosenman                     http://www.lerctr.org/~ler
Phone: +1 972-414-9812                 E-Mail: ler@lerctr.org
US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749

--==========8485BC4CCAAFD3E9FBC0==========
Content-Type: application/pgp-signature
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (FreeBSD)

iD8DBQFAXnATrRNGhTxJvdYRAsR0AJ4ot4STY8+OUAHZB/YorgvXVnq/OACfdo0q
qI2jHm4LFol2dQT/fOQJ5As=
=0z87
-----END PGP SIGNATURE-----

--==========8485BC4CCAAFD3E9FBC0==========--