Flood and Bandwith Protection
alex.cabana_at_cgocable.ca
Date: 03/14/05
- Previous message: Thomas Hardy: "Windows XP Home Edition Administrator Access"
- Next in thread: T. Sean Weintz: "Re: Flood and Bandwith Protection"
- Reply: T. Sean Weintz: "Re: Flood and Bandwith Protection"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: 14 Mar 2005 11:59:51 -0800
Hi!
I'm working for an ISP and I'm trying to find a solution to some real
annoying flood problems. I have to control the traffic over a Gig-link
(About 600mb/s). I tried with snort and it's nearly impossible.
Specific Action required: Block the destination IP (Yeah, own customer)
when he receive more than 3mb/s of traffic per minutes. Is there a
snort rule that allow that.. or anything else somebody is aware of ?
Here's a short draw of the network
(provider) --- Gig link --- Cisco 7114 Router --- Cable Modem Users
|
|
Snort Linux Box
Any help or suggestion is appreciated
- Previous message: Thomas Hardy: "Windows XP Home Edition Administrator Access"
- Next in thread: T. Sean Weintz: "Re: Flood and Bandwith Protection"
- Reply: T. Sean Weintz: "Re: Flood and Bandwith Protection"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]