Hello guys , yesterday we registered a very unusual event on our network.
UDP traffic went 240Mbps up from the average value in our main internet
link as show in picture bellow:
eve
Im trying to get some info about this event using filters but still can
not get the idea.
How Can know who is generating this traffic ? I think that the solution
should involve some ordered steps to get the source ip , destination
port , et.
I can think also that it could be due to an attackt but since Im not sure.
Any ideas about how to begin, could be great,
Regards,
Leandro.
------------------------------------------------------------------------------
_______________________________________________
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss