[Bro] DDOS ( SYN flodding attack)
robin at icir.org
Wed Mar 31 09:48:32 PDT 2010
On Wed, Mar 31, 2010 at 20:20 +0530, vijay khadse wrote:
> Can we use BRO to detect DDOS ( SYN Flodding attack) at a router.
Try running Bro with the script synflood.bro. You may need to tweak
a few of the parameters at the beginning of the script.
Robin Sommer * Phone +1 (510) 666-2886 * robin at icir.org
ICSI/LBNL * Fax +1 (510) 666-2956 * www.icir.org
More information about the Bro