Well, if its not hitting YOU then its not to easy to tell. If its hitting your routers you should see it. But if your upstream is getting attacked that's a whole different story.
We share a upstream router with a datacenter a few cities over. They got hit hard from china asia a year or two ago, Like busting to 1.2Gb/s if I recall correctly. At first we were getting crazy packet loss because the upstream router was getting hammered. After that they put in a few rules to drop the traffic and that made it stable, But latency was like +140ms going into it. Long story short, If you see latency climbing up, More so then normal for peak time, It could be an attack. Even dropping packets takes CPU time. And if you have that many, It can really slow things down. Nick Olsen Network Operations (321) 205-1100 x106 ---------------------------------------- From: "Jeremie Chism" <[email protected]> Sent: Monday, August 02, 2010 10:04 AM To: "WISPA General List" <[email protected]> Subject: [WISPA] DOS attack I noticed on Friday that everything I had seemed very slow. I went through checking the usual things and found no problem. After digging into everything I could put my hands on, I resorted to calling my upstream to see if they noticed any problems. They of course said no. At 430 that afternoon I got a call from one of their "engineers" stating that they had experienced a DOS attack that was affecting certain customers. They made some changes and it actually seemed to work better than before. Even my latency times had dropped. Today the problem seems to be creeping back to the same way it was Friday. My question is, is there a way to determine in the future that this is happening. Is there something specific that would lead me to the conclusion that in fact that is what is going on. -- Jeremie Chism TritonDataLink
-------------------------------------------------------------------------------- WISPA Wants You! Join today! http://signup.wispa.org/ -------------------------------------------------------------------------------- WISPA Wireless List: [email protected] Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
