[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

DDOS, IDS, RTBH, and Rate limiting

Subject: DDOS, IDS, RTBH, and Rate limiting
From: rdobbins at arbor.net (Roland Dobbins)
Date: Fri, 21 Nov 2014 09:37:01 +0700
In-reply-to: <CAMY-7PqV8vdQu_M3=B2onVOdxnkz5taedVKTbXAj0Z+zgTGP_A@mail.gmail.com>
References: <CALgsdbdAZ=J9RsUd1U7kbconpVqmGyuEHZ5jOMtVK15c8aTEFA@mail.gmail.com> <[email protected]> <[email protected]> <[email protected]> <CAMY-7PqV8vdQu_M3=B2onVOdxnkz5taedVKTbXAj0Z+zgTGP_A@mail.gmail.com>

On 21 Nov 2014, at 9:19, Robert Duffy wrote:

> What open-source NetFlow analysis tools would you recommend for 
> quickly
> detecting a DDoS attack?

I generally recommend that folks get started with something like 
nfdump/nfsen or ntop.  There are other, more sophisticated tools out 
there, but these allow one to get up and running quickly, and to gain 
valuable operational experience with which to evaluate more 
sophisticated tools, if they're needed.

-----------------------------------
Roland Dobbins <rdobbins at arbor.net>

Follow-Ups:
- DDOS, IDS, RTBH, and Rate limiting
  - From: jackson.tim at gmail.com (Tim Jackson)

References:
- DDOS, IDS, RTBH, and Rate limiting
  - From: pavel.odintsov at gmail.com (Pavel Odintsov)
- DDOS, IDS, RTBH, and Rate limiting
  - From: rdobbins at arbor.net (Roland Dobbins)
- DDOS, IDS, RTBH, and Rate limiting
  - From: denys at visp.net.lb (Denys Fedoryshchenko)
- DDOS, IDS, RTBH, and Rate limiting
  - From: rdobbins at arbor.net (Roland Dobbins)
- DDOS, IDS, RTBH, and Rate limiting
  - From: rob at esecuredata.com (Robert Duffy)

Prev by Date: DDOS, IDS, RTBH, and Rate limiting
Next by Date: DDOS, IDS, RTBH, and Rate limiting
Previous by thread: DDOS, IDS, RTBH, and Rate limiting
Next by thread: DDOS, IDS, RTBH, and Rate limiting
Index(es):
- Date
- Thread