Roland,
I am aware of all disadvantages of this approach. But as soon as there
is some DDoS going through respective box, it's netflow capacity is
absolutely overwhelmed, thus not creating 'standard' flows.
The other major issue is that overwhelmed netflow on Sup2T causes the
box to stop responding to SNMP queries.. :/
Thank you,
Jiri
Dne 23.9.2013 17:01, Dobbins, Roland napsal(a):
On Sep 23, 2013, at 9:57 PM, Jiri Prochazka wrote:
Is this doable?
It's not a good idea, as you lose visibility into traffic which you're
blocking, but which is still chewing up link capacity and pummeling your boxen.
-----------------------------------------------------------------------
Roland Dobbins <[email protected]> // <http://www.arbornetworks.com>
Luck is the residue of opportunity and design.
-- John Milton
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
